Skip to main content

Manabipocket For Parents EUVDEUVD-2026-78279

| CVE-2026-86701 LOW
Improper Export of Android Application Components (CWE-926)
2026-09-15 jpcert GHSA-h2m7-q7v5-5qfc
1.8
CVSS 4.0 · Vendor: jpcert

Severity by source

Vendor (jpcert) PRIMARY
1.8 LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (jpcert) · only source for this CVE.

CVSS VectorVendor: jpcert

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
A
Scope
X

Lifecycle Timeline

2
Analysis Generated
Sep 15, 2026 - 10:41 vuln.today
CVSS changed
Sep 15, 2026 - 06:22 NVD
2.5 (LOW) 1.8 (LOW)

DescriptionCVE.org

Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components. A malicious application installed on the user's Android device may exploit the affected component via an Intent, potentially allowing the malicious application to obtain sensitive information from the affected application.

AnalysisAI

ManabiPocket for Parents 1.2.3 and earlier — an Android companion app for a Japanese parental school-communication service published by NTT Docomo Business, Inc. — exposes at least one application component that is reachable by other apps on the same device. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

Share

EUVD-2026-78279 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy