https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:57:05.280890+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-36611 EUVD-2026-36611 2026-10-06T07:57:05.372686+00:00 EUVD-2026-36611 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5523 fkie_cve-2020-5523 2026-10-06T07:57:05.372727+00:00

Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

 https://cve.radiocsirt.org/vuln/ghsa-qrwh-wc9j-x9cj GHSA-qrwh-wc9j-x9cj 2026-10-06T07:57:05.372765+00:00

Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

 https://cve.radiocsirt.org/vuln/gsd-2020-5523 gsd-2020-5523 2026-10-06T07:57:05.372783+00:00 gsd-2020-5523 https://cve.radiocsirt.org/vuln/jvndb-2020-000007 jvndb-2020-000007 2026-10-06T07:57:05.372795+00:00

Android App "MyPallete" developed by NTT Data Corporation is used by several financial institutions as Android applications for their customers. "MyPallete" is vulnerable to improper server certificate verification (CWE-295) and to improper host-matching validation (CWE-297). Dai Nakamura of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.