Vulnerability · Published Aug 13, 2026 · Assigned by jpcert
CVE-2026-72506
Medium 5.4
In plain English
A medium-severity security flaw in "VoiceTra(Voice Translator)" for Android from National Institute of Information and Communications Technology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Official description
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for Android | 9.1.3 – through 9.2.0 |
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for iOS | 9.1.3 – through 9.2.0 |
Weakness: CWE-941 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N