{"id":"CVE-2026-113345","title":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability","summary":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-276"],"vendor":"Ministry of Land, Infrastructure, Transport and Tourism, Japan","product":"Electronic delivery item Inspection Support System","affected":["electronic_delivery_item_inspection_support_system <= Ver.4.0.36"],"published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T04:43:59.645Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113345","references":[{"url":"https://www.ysk.nilim.go.jp/cals/"},{"url":"https://jvn.jp/en/jp/JVN75668103/"}],"tags":["cve.org"],"ingestedAt":"2026-10-26T05:18:14.109Z","slug":"CVE-2026-113345","body":"## Overview\n\nElectronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.\n\n## Affected\n\n- `electronic_delivery_item_inspection_support_system <= Ver.4.0.36`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}