URL Handling Vulnerability in Ticket Ryutsu Center Android Application
CVE-2026-92862

4.6MEDIUM

Key Information:

Vendor

Wavedash Co., Ltd.

Status
Ticket Ryutsu Center
Vendor
CVE Published:
8 October 2026

What is CVE-2026-92862?

The Ticket Ryutsu Center Android application is susceptible to an improper handling of custom URL schemes. This vulnerability could allow malicious applications to craft Intents that redirect users to arbitrary websites without their consent. Exploitation of this flaw might expose users to phishing attacks or other security risks, making it imperative for users to ensure they are using the latest version of the app to mitigate potential threats.

Affected Version(s)

Ticket Ryutsu Center 0 <= 4.1.9

References

https://play.google.com/store/apps/details?id=jp.co.ticket
https://jvn.jp/en/jp/JVN53292492/

CVSS V4

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.