{"id":"CVE-2026-113345","aliases":[],"cve":{"records":[{"id":"CVE-2026-113345","source":"jpcert","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-19T23:47:15.593Z","published":"2026-10-26T04:43:59.645Z","modified":"2026-10-26T14:35:20.967Z"}],"publishers":[{"name":"jpcert","role":"CNA","organizationId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","modified":"2026-10-26T04:43:59.645Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-26T14:35:20.967Z"}],"references":[{"url":"https://www.ysk.nilim.go.jp/cals/","tags":[],"source":"jpcert"},{"url":"https://jvn.jp/en/jp/JVN75668103/","tags":[],"source":"jpcert"}],"weaknesses":[{"id":"CWE-276","description":"Incorrect default permissions","source":"jpcert"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-26T13:30:55.453904Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file…","titleSource":"jpcert","descriptionSource":"jpcert","description":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.","score":8.5,"severity":"high","published":"2026-10-26T04:43:59.645Z","modified":"2026-10-26T14:35:20.967Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Ministry of Land, Infrastructure, Transport and Tourism, Japan","name":"Electronic delivery item Inspection Support System","platforms":[],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"Ver.4.0.36","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"jpcert","url":"https://www.cve.org/CVERecord?id=CVE-2026-113345"}],"remediation":[],"references":["https://www.ysk.nilim.go.jp/cals/","https://jvn.jp/en/jp/JVN75668103/"],"sources":[{"name":"CVE","id":"CVE-2026-113345","modified":"2026-10-26T14:35:20.967Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-113345"}],"assessments":[{"source":"jpcert","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},{"source":"jpcert","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.5}],"sourceAffected":[],"observedAt":"2026-10-29T14:32:34.295Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:05:32.929Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"The Electronic delivery item Inspection Support System, version 4.0.36 and below, has an improper file access permission vulnerability, potentially allowing file tampering. The stated impact is arbitrary code execution. Local access is required to exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T08:42:11.342Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-113345"}]}}