CVE-2026-113345

Severity: high (CVSS 8.5 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-26 · updated 2026-10-26
Weakness: CWE-276

Description

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.

Affected products

Ministry of Land, Infrastructure, Transport and Tourism, Japan Electronic delivery item Inspection Support System: through Ver.4.0.36

References

https://jvn.jp/en/jp/JVN75668103/
https://www.ysk.nilim.go.jp/cals/

Get alerted when CVE-2026-113345 or the next vulnerability affects your stack