CVE-2026-41872

"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.

• CWE-295

• https://apps.apple.com/jp/app/id942355925
• https://jvn.jp/en/jp/JVN38632731/
• https://play.google.com/store/apps/details?id=jp.co.kura_corpo&hl=ja

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41862Spring Statemachine's Kryo-based persistence backends (JPA, …8.8
• CVE-2026-41863Spring AI's support for Anthropic's Skills API used LLM-infl…6.5
• CVE-2026-41869Missing Authorization, Improper Resource Shutdown and Job In…9.1
• CVE-2026-4187A vulnerability was identified in Tiandy Easy7 Integrated Ma…5.5
• CVE-2026-41870Missing Authorization, Improper Control of Generation of Cod…8.8
• CVE-2026-41871Missing Authorization, Use of Externally-Controlled Input to…9.8
• CVE-2026-41873** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation …9.8
• CVE-2026-41874Quick.Cart stores hard-coded, plaintext admin credentials in…6.8
• CVE-2026-41876R-SOFT DMS is vulnerable to OS Command Injection in konwertu…8.7
• CVE-2026-41877R-SOFT DMS is vulnerable to Stored XSS in file upload functi…5.1
• CVE-2026-41878R-SOFT DMS is vulnerable to Insecure Direct Object Reference…7.1
• CVE-2026-41879R-SOFT DMS stores superadmin credentials using a non-salted …8.2