CVE-2026-59776

MEDIUM

Sony Corporation FeliCa IC Chips - Missing Cryptographic Step

Title source: rule

Description

Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with.

References (2)

Core 2

Core References

https://www.sony.co.jp/en/Products/felica/business/information/2025001.html

https://jvn.jp/en/jp/JVN40509781/

Scores

CVSS v3 6.8

EPSS 0.0014

EPSS Percentile 4.0%

Attack Vector PHYSICAL

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-325

Status published

Products (1)

Sony Corporation/FeliCa IC chips shipped in or before 2017

Published Jul 21, 2026

Tracked Since Jul 21, 2026