Description
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Published: 2026-08-13
Score: 5.1 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 06:30:00 +0000

Type Values Removed Values Added
Title Incorrect Server Redirection in VoiceTra Enables Data Theft

Thu, 13 Aug 2026 04:30:00 +0000

Type Values Removed Values Added
Description VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Weaknesses CWE-941
References
Metrics cvssV3_0

{'score': 5.4, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2026-08-13T04:07:00.335Z

Reserved: 2026-08-10T01:06:30.071Z

Link: CVE-2026-72506

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-13T05:17:26.553

Modified: 2026-08-13T05:17:26.553

Link: CVE-2026-72506

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T06:15:15Z

Weaknesses