CVE-2026-72506
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
VoiceTra by NICT contains a vulnerability due to an incorrectly specified destination in a communication channel. Users may be redirected to an attacker-controlled server, potentially leading to theft of input data or display of incorrect results.
Risk Assessment
Risk of theft of user-entered data and delivery of false information, potentially compromising data confidentiality and integrity.
Recommendation
Update the VoiceTra application to the latest patched version if available, and inform users about the risk of unexpected redirects.
Original NVD description (English source)
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.