What’s Vulnerable › Vulnerabilities

CVE-2026-107153

• Severity: high (CVSS 7.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-14 · updated 2026-10-15
• Weakness: CWE-1391

Description

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.

Affected products

• Rakuten Mobile, Inc. Rakuten BIGs: all versions
• Rakuten Mobile, Inc. Rakuten Hand: all versions
• Rakuten Mobile, Inc. Rakuten Hand 5G: all versions
• Rakuten Mobile, Inc. Rakuten Mini: all versions

References

• https://jvn.jp/en/jp/JVN47427200/
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-big-s/support/index.html
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand-5g/support/index.html
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand/support/index.html
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-mini/support/index.html

Get alerted when CVE-2026-107153 or the next vulnerability affects your stack