Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-41872

"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communicat

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EPG, Inc. "Kura Sushi Official App" for Android

  • from 2.0.11 to 3.9.10affected

EPG, Inc. "Kura Sushi Official App" for iOS

  • from 2.0.11 to 3.9.10affected

References