CVE-2026-92861

MediumCVSS 4.0

Published: 08/10/2026(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.

Risk Assessment

The risk includes potential unauthorized access to API services, potentially leading to data breaches or abuse of application functionality.

Recommendation

Remove hard-coded credentials from the application and implement secure storage of API keys, e.g., via a backend server.

Other vulnerabilities in Ticket Ryutsu Center

CVE-2026-92862Low
The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent.

Original NVD description (English source)

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS