CVE-2026-113345: CVE-2026-113345: güvenlik açığı

Açıklama (NVD)

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.

Özet bilgiler

CVSS v3.1

7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v4.0

8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,12 (yüzdelik 2)

CWE

CWE-276

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• jvn.jp
• www.ysk.nilim.go.jp
• CWE-276