What’s Vulnerable › Vulnerabilities

CVE-2026-85125

• Severity: medium (CVSS 5.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-14 · updated 2026-09-16
• Weakness: CWE-940

Description

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites.

Affected products

• YAMAP INC. YAMAP -Social Trekking GPS App: through 17.1.0

References

• https://info.yamap.com/archives/8173
• https://jvn.jp/en/jp/JVN69877538/
• https://play.google.com/store/apps/details?id=jp.co.yamap&hl=en

Get alerted when CVE-2026-85125 or the next vulnerability affects your stack