https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:27:59.685308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-19936 cnvd-2018-19936 2026-10-03T07:27:59.688910+00:00 cnvd-2018-19936 https://cve.radiocsirt.org/vuln/euvd-2026-60907 EUVD-2026-60907 2026-10-03T07:27:59.688939+00:00 EUVD-2026-60907 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0691 fkie_cve-2018-0691 2026-10-03T07:27:59.688953+00:00

Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to version 1.0.6, and KDDI +Message App for iOS prior to version 1.1.23) do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

 https://cve.radiocsirt.org/vuln/ghsa-wh57-pfpg-3fff GHSA-wh57-pfpg-3fff 2026-10-03T07:27:59.688984+00:00

Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to version 1.0.6, and KDDI +Message App for iOS prior to version 1.1.23) do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

 https://cve.radiocsirt.org/vuln/gsd-2018-0691 gsd-2018-0691 2026-10-03T07:27:59.689002+00:00 gsd-2018-0691 https://cve.radiocsirt.org/vuln/jvndb-2018-000100 jvndb-2018-000100 2026-10-03T07:27:59.689014+00:00

+Message App fails to verify SSL server certificates. ma.la of LINE Corporation reported this vulnerability to the developer, and also to IPA in order to notify users of its solution through JVN. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.