CVE-2026-72506
Last modified
CVE-2026-72506 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results..
Description
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for Android | >= 9.1.3, <= 9.2.0 |
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for iOS | >= 9.1.3, <= 9.2.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-72506?
How severe is CVE-2026-72506?
How do I fix CVE-2026-72506?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-72498In the Linux kernel, the following vulnerability has been re…
- CVE-2026-72499In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-7250GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
- CVE-2026-72500In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-72501In the Linux kernel, the following vulnerability has been re…
- CVE-2026-72502In the Linux kernel, the following vulnerability has been re…7.5
- CVE-2026-72508A flaw was found in the multicloud-operators-subscription co…9.9
- CVE-2026-7251Eppendorf BioFlo 320 is vulnerable due to VNC server using a…9.8
- CVE-2026-7252The WP-Optimize – Cache, Compress images, Minify & Clean dat…8.1
- CVE-2026-72522libexpat before 2.8.3 has an out-of-bounds read and resultan…6.2
- CVE-2026-72526A flaw was found in the multicloud-integrations component. T…9.9
- CVE-2026-72529A remote unauthorized attacker with network access via port …9.8
Are you affected by CVE-2026-72506?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST