PT-2026-39937 · Kura Sushi · Kura Sushi Official App

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-41872

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Kura Sushi Official App (affected versions not specified)

Description The application is subject to improper certificate validation, which occurs when a system fails to properly verify the authenticity of a digital certificate. This flaw allows a man-in-the-middle attack, enabling an attacker to eavesdrop on or alter communications regarding push notifications between the application and the server.

Recommendations Update the application to the latest version.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2026-41872

Affected Products

Kura Sushi Official App

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-41872 · Security Note
• https://twitter.com/0x2ed3bb60/status/2054092065064329500 · Twitter Post
• https://t.me/cveNotify/163175 · Telegram Post
• https://t.me/CVEtracker/53469 · Telegram Post
• https://play.google.com/store/apps/details?id=jp.co.kura_corpo&hl=ja · Note
• https://apps.apple.com/jp/app/id942355925 · Note
• https://jvn.jp/en/jp/JVN38632731 · Note