CVE-2026-72506
Medium · 5.4CVSS
5.4
EPSS
—
Published
Aug 13, 2026
CISA due date
—
The record
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-69246 Guzzle is an extensible PHP HTTP client. CWE-941
- CVE-2026-40118 UDP Console provided by Arcserve contains an incorrectly specified destination in a… CWE-941
- CVE-2025-69515 An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to… CWE-941
- CVE-2025-53899 Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication… CWE-941
- CVE-2024-29415 The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such… CWE-941