High severity7.4NVD Advisory· Published May 12, 2026· Updated May 12, 2026

CVE-2026-41872

Description

"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

EPG, Inc./Kura Sushi Official Appllm-create

Patches

Vulnerability mechanics

References

apps.apple.com/jp/app/id942355925nvd
jvn.jp/en/jp/JVN38632731/nvd
play.google.com/store/apps/detailsnvd

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000