https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T18:50:57.825336+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21909 EUVD-2026-21909 2026-10-22T18:50:57.831787+00:00 EUVD-2026-21909 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20835 fkie_cve-2021-20835 2026-10-22T18:50:57.831829+00:00

Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity of the app via the vulnerable App, which may result in Mercari account's access token being obtained.

 https://cve.radiocsirt.org/vuln/ghsa-2hf9-98xv-3h7h GHSA-2hf9-98xv-3h7h 2026-10-22T18:50:57.831872+00:00

Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity of the app via the vulnerable App, which may result in Mercari account's access token being obtained.

 https://cve.radiocsirt.org/vuln/gsd-2021-20835 gsd-2021-20835 2026-10-22T18:50:57.831892+00:00 gsd-2021-20835 https://cve.radiocsirt.org/vuln/jvndb-2021-000096 jvndb-2021-000096 2026-10-22T18:50:57.831905+00:00

Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) provided by Mercari, Inc. is vulnerable to improper handling of Intent (CWE-939). RyotaK reported this vulnerability to Mercari, Inc. and Mercari, Inc. reported it to JPCERT/CC to disclose the vulnerability through JVN.