01 Record

CVE-2026-73537

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected

MediumPUBLISHEDCNA: jpcert

Base score5.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

View raw JSON CVE Program record

02 Description

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected

03 Metadata

Published

2026-08-21 07:23Z18 HR AGO

Last updated

2026-08-21 12:44Z12 HR AGO

Reserved

2026-08-18

Assigning CNA

jpcert

Record state

PUBLISHED

Severity

Medium (CVSS 5.1)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Weaknesses

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base

SSVC decision

ExploitationnoneAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

7dfa5eb4076377d4b343cbda79560997137ff1a13b5c9578e6e3af1f62aa5072

04 Affected products

VendorProductVersionsPlatforms

Japan Science and Technology Agency (JST)Miraikan Assist App Android version0 to < 1.1.7—

Japan Science and Technology Agency (JST)Miraikan Assist App iOS version0 to < 1.0.7—

05 References

www.miraikan.jst.go.jphttps://www.miraikan.jst.go.jp/en/news/general/202608194709.html
jvn.jphttps://jvn.jp/en/jp/JVN09266484/