jvn.jp
https://jvn.jp/en/jp/JVN00941257 CVE-2026-72506
MEDIUM
VoiceTra (Voice Translator) Incorrectly Specified Destination in a Communication Channel
Record summary
CVE-2026-72506 has a selected CVSS score of 5.1 (medium).
Description
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 13, 2026 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
"VoiceTra(Voice Translator)" for AndroidBrowse National Institute of Information and Communications Technology / "VoiceTra(Voice Translator)" for AndroidDefault status: unaffected | CVE List | 9.1.3 to ≤ 9.2.0 | affected |
"VoiceTra(Voice Translator)" for iOSBrowse National Institute of Information and Communications Technology / "VoiceTra(Voice Translator)" for iOSDefault status: unaffected | CVE List | 9.1.3 to ≤ 9.2.0 | affected |
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-72506 nict.go.jp
https://www.nict.go.jp/en/topics/2026/08/10-1.html nict.go.jp
https://www.nict.go.jp/publicity/topics/2026/08/10-1.html