CVE-2026-75559 Details
Description
The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.
A vulnerability exists in the "Vehicle Inspection Certificate Viewer" smartphone application, available on both iOS and Android, which may lead to the unintentional inclusion of sensitive information in data sent by the app. This flaw could result in the exposure of API integration credentials, such as an access ID and access key. The vulnerability affects version 6.2.0 and earlier of the application.
Users are advised to update the application to the latest version. The developer has issued new access IDs and access keys to API users and revoked those that may have been exposed, rendering this vulnerability no longer exploitable.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-201 | Insertion of Sensitive Information Into Sent Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MLIT Vehicle Inspection Certificate Viewer | <= 6.2.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 15, 2026 | New CVE Received | [email protected] |