CVE-2026-86701
Received Received - Intake

Improper Access Control in ManabiPocket for Parents

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: JPCERT/CC

Description
Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components. A malicious application installed on the user's Android device may exploit the affected component via an Intent, potentially allowing the malicious application to obtain sensitive information from the affected application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-16
AI Q&A
2026-09-15
EPSS Evaluated
2026-09-15
NVD
CVE-2026-86701
EUVD
EUVD-2026-78279

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ntt_docomo_business manabipocket_for_parents to 1.2.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-926 The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper access control issue in the Android application 'ManabiPocket for Parents'. It allows a malicious app on the same device to exploit a component via an Intent, potentially accessing sensitive information from the affected app.

Detection Guidance

This vulnerability is specific to the Android application 'ManabiPocket for Parents' and requires checking the installed version of the app. No network-level detection commands are applicable. To detect if the vulnerable version is installed, check the app version in the device settings or via the app menu.

Impact Analysis

A malicious app could exploit this to obtain sensitive information like session data, enabling impersonation of the user to access services. Users should update to version 1.2.4 or later to mitigate this risk.

Compliance Impact

This vulnerability may lead to unauthorized access to sensitive user information, which could violate data protection principles under GDPR (e.g., Article 32 on security of processing) and HIPAA (e.g., safeguards for protected health information). Unauthorized access risks non-compliance with these regulations due to potential data breaches.

Mitigation Strategies

Update the 'ManabiPocket for Parents' application to version 1.2.4 or later through the Google Play Store. Verify the update by checking the app version in the app menu or device settings.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86701. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart