{"id":"CVE-2026-113345","state":"PUBLISHED","title":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerabi","description":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.","publishedAt":"2026-10-26T04:43:59.645Z","updatedAt":"2026-10-26T14:35:20.967Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["Ministry of Land, Infrastructure, Transport and Tourism, Japan Electronic delivery item Inspection Support System"],"affected":[{"vendor":"Ministry of Land, Infrastructure, Transport and Tourism, Japan","product":"Electronic delivery item Inspection Support System","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Ver.4.0.36","versionType":"semver"}]}],"references":["https://www.ysk.nilim.go.jp/cals/","https://jvn.jp/en/jp/JVN75668103/"],"weaknesses":["CWE-276"],"ingestedAt":"2026-10-29T20:10:43.281Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/113xxx/CVE-2026-113345.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-113345","state":"PUBLISHED","datePublished":"2026-10-26T04:43:59.645Z","dateUpdated":"2026-10-26T14:35:20.967Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2026-10-19T23:47:15.593Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution."}],"affected":[{"vendor":"Ministry of Land, Infrastructure, Transport and Tourism, Japan","product":"Electronic delivery item Inspection Support System","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Ver.4.0.36","versionType":"semver"}]}],"references":[{"url":"https://www.ysk.nilim.go.jp/cals/"},{"url":"https://jvn.jp/en/jp/JVN75668103/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"HIGH","baseScore":8.5,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-276","description":"Incorrect default permissions","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2026-10-26T04:43:59.645Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-113345","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-26T13:30:55.453904Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-26T14:35:20.967Z"}}]}}}