Security Advisory

CVE-2026-41872

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-12 05:21:42
Last updated 2026-05-12 13:17:40
Assigner jpcert
CVSS score 7.4
State PUBLISHED

Description

"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.