What’s Vulnerable › Vulnerabilities

CVE-2026-72506

• Severity: medium (CVSS 5.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-13 · updated 2026-08-28
• Weakness: CWE-941

Description

VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.

Affected products

• National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for Android: from 9.1.3 through 9.2.0
• National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for iOS: from 9.1.3 through 9.2.0

References

• https://jvn.jp/en/jp/JVN00941257/
• https://www.nict.go.jp/en/topics/2026/08/10-1.html
• https://www.nict.go.jp/publicity/topics/2026/08/10-1.html

Get alerted when CVE-2026-72506 or the next vulnerability affects your stack