https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T17:14:09.619729+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193975 EUVD-2026-193975 2026-10-20T17:14:09.623621+00:00 EUVD-2026-193975 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39507 fkie_cve-2023-39507 2026-10-20T17:14:09.623678+00:00

Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.

 https://cve.radiocsirt.org/vuln/ghsa-96qx-whg9-w5rw GHSA-96qx-whg9-w5rw 2026-10-20T17:14:09.623716+00:00

Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.

 https://cve.radiocsirt.org/vuln/gsd-2023-39507 gsd-2023-39507 2026-10-20T17:14:09.623735+00:00 gsd-2023-39507 https://cve.radiocsirt.org/vuln/jvndb-2023-000081 jvndb-2023-000081 2026-10-20T17:14:09.623747+00:00

"Rikunabi NEXT" App for Android provided by Recruit Co., Ltd. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly (CWE-939) which may be exploited to direct the App to access any sites. Nao Komatsu of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.