CVE-2026-41872

Impact

"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://apps.apple.com/jp/app/id942355925
• https://jvn.jp/en/jp/JVN38632731/
• https://play.google.com/store/apps/details?id=jp.co.kura_corpo&hl=ja