Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.4
CVE-2026-75553: Yorisou e Net apps expose hard‑coded encryption key
CVE-2026-75553 · published 24 days ago
Summary
The Android and iOS versions of Tohoku Electric Power’s “Yorisou e Net” app contain a secret code that is hard‑coded into the program. Because the code is the same for every installation, anyone who can get a copy of the app could recover it and potentially read or tamper with protected information. Update to a version that generates a unique code or ask the provider for a fix, and avoid sending highly sensitive data through the app until it is patched.
What to do
- Update tohoku electric power company, incorporated tohoku electric power "yorisou e net" android app to version 2.8.0 or later.
- Update tohoku electric power company, incorporated tohoku electric power "yorisou e net" ios app to version 2.8.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tohoku electric power company, incorporated | tohoku electric power "yorisou e net" android app | < 2.8.0 |
| tohoku electric power company, incorporated | tohoku electric power "yorisou e net" ios app | < 2.8.0 |
Original advisory text
Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the affected product.
Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the affected product.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-321Use of Hard-coded Cryptographic Key
Timeline
Published25 Sep 2026
Updated14 Oct 2026
First seen25 Sep 2026
Track software like this
Free during beta