Medium severity4.3NVD Advisory· Published Oct 15, 2026

CVE-2026-72528

Description

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

CREEMA LTD./Handmade Marketplace App - Creemallm-create

Patches

Vulnerability mechanics

References

apps.apple.com/jp/app/id916614208nvd
jvn.jp/en/jp/JVN48627289/nvd
play.google.com/store/apps/detailsnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000