Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Kura Sushi App May Allow Eavesdropping or Tampering with Notifications

CVE-2026-41872 · published 5 months ago
Summary

The Kura Sushi App is vulnerable to a type of cyber attack that could allow someone to intercept or alter notifications sent to your device. This could lead to unauthorized access to your account or other security issues. Users should be cautious and consider updating the app to the latest version.

Original advisory text
"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notif...
"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.1 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-295Improper Certificate Validation
Timeline
Published12 May 2026
Updated26 Oct 2026
First seen12 May 2026
Sources
CVE-2026-41872 · NVD
Track software like this
Free during beta