<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/cna-root/jpcert/recent</id>
  <title>Most recent vulnerabilities from the jpcert CNA root</title>
  <updated>2026-08-27T23:19:17.964121+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Latest vulnerabilities published by the CNAs operating under the jpcert root of the CVE Program.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-76149</id>
    <title>CVE-2026-76149 (jpcert)</title>
    <updated>2026-08-26T04:55:14.587000+00:00</updated>
    <content>CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-76149"/>
    <summary>CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file.</summary>
    <published>2026-08-26T04:55:14.587000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-76148</id>
    <title>CVE-2026-76148 (jpcert)</title>
    <updated>2026-08-26T04:55:07.147000+00:00</updated>
    <content>CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-76148"/>
    <summary>CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.</summary>
    <published>2026-08-26T04:55:07.147000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-73335</id>
    <title>CVE-2026-73335 (jpcert)</title>
    <updated>2026-08-26T04:54:58.950000+00:00</updated>
    <content>Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-73335"/>
    <summary>Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application.</summary>
    <published>2026-08-26T04:54:58.950000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-59769</id>
    <title>CVE-2026-59769 (jpcert)</title>
    <updated>2026-08-25T07:43:10.005000+00:00</updated>
    <content>FA-50 all versions contain hard-coded credentials.&#13;
An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-59769"/>
    <summary>FA-50 all versions contain hard-coded credentials.&#13;
An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number.</summary>
    <published>2026-08-25T07:43:10.005000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-67578</id>
    <title>CVE-2026-67578 (jpcert)</title>
    <updated>2026-08-25T07:42:26.438000+00:00</updated>
    <content>FA-50 all versions miss authentication for some configuration.&#13;
An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-67578"/>
    <summary>FA-50 all versions miss authentication for some configuration.&#13;
An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters.</summary>
    <published>2026-08-25T07:42:26.438000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-68959</id>
    <title>CVE-2026-68959 (jpcert)</title>
    <updated>2026-08-25T06:27:59.698000+00:00</updated>
    <content>SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-68959"/>
    <summary>SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.</summary>
    <published>2026-08-25T06:27:59.698000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-68062</id>
    <title>CVE-2026-68062 (jpcert)</title>
    <updated>2026-08-25T06:27:54.700000+00:00</updated>
    <content>SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-68062"/>
    <summary>SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.</summary>
    <published>2026-08-25T06:27:54.700000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-66109</id>
    <title>CVE-2026-66109 (jpcert)</title>
    <updated>2026-08-25T06:27:50.328000+00:00</updated>
    <content>A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-66109"/>
    <summary>A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.</summary>
    <published>2026-08-25T06:27:50.328000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-68960</id>
    <title>CVE-2026-68960 (jpcert)</title>
    <updated>2026-08-25T06:27:20.798000+00:00</updated>
    <content>A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-68960"/>
    <summary>A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system.</summary>
    <published>2026-08-25T06:27:20.798000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-69665</id>
    <title>CVE-2026-69665 (jpcert)</title>
    <updated>2026-08-25T06:27:10.352000+00:00</updated>
    <content>SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-69665"/>
    <summary>SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.</summary>
    <published>2026-08-25T06:27:10.352000+00:00</published>
  </entry>
</feed>
