EUVD-2026-63826
GHSA-599w-xgxp-wr28
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-delivered XSS requiring active user interaction (UI:R) with scope change (S:C) reflecting cross-origin WebView execution; C:N and A:N align with description limiting impact to content alteration only.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product, resulting in the displayed content being altered.
AnalysisAI
Cross-site scripting in the Miraikan Assist App (Android < 1.1.7, iOS < 1.0.7) enables remote attackers to inject and execute arbitrary JavaScript within the app's embedded WebView component when a user interacts with attacker-controlled content. The scope change in the CVSS vector (S:C) reflects that execution occurs across origin boundaries within the WebView context, enabling content manipulation beyond the app's own domain. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that a victim user actively interact with attacker-controlled content rendered within the Miraikan Assist App's WebView component (UI:R per CVSS vector) - the app must load or display content that includes the injected script. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.0 base score of 4.7 (Medium) is driven by AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a malicious payload embedding JavaScript and delivers it through a channel the Miraikan Assist App renders in its WebView - for example, a QR-code-linked exhibit page or a shared deep-link URL. When the victim opens this content within the app, the injected script executes in the WebView context, allowing the attacker to overwrite displayed exhibit content with phishing material, fake alerts, or misleading instructions. … |
| Remediation | Update the Miraikan Assist App to Android version 1.1.7 or later, or iOS version 1.0.7 or later; patches are confirmed available from the vendor per advisory at https://www.miraikan.jst.go.jp/en/news/general/202608194709.html and JPCERT advisory JVN#09266484 (https://jvn.jp/en/jp/JVN09266484/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today