CVE-2026-72506
Quick assessment
Affected
National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for Android
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
National Institute of Information and Communications Technology VoiceTra是National Institute of Information and Communications Technology政府部门的一款支持多语种实时语音翻译的应用。 National Institute of Information and Communications Technology VoiceTra 9.1.3版本至9.2.0版本存在授权问题漏洞
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-MiddleAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for Android | 9.1.3≤ 9.2.0 |
affected |
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for iOS | 9.1.3≤ 9.2.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-72506
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通信信道中错误指定的目的地
Source: CVE Program / CVE List V5
Vulnerability Title
National Institute of Information and Communications Technology VoiceTra 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
National Institute of Information and Communications Technology VoiceTra是National Institute of Information and Communications Technology政府部门的一款支持多语种实时语音翻译的应用。 National Institute of Information and Communications Technology VoiceTra 9.1.3版本至9.2.0版本存在授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for Android | 9.1.3 ~ 9.2.0 | - |
|
| National Institute of Information and Communications Technology | "VoiceTra(Voice Translator)" for iOS | 9.1.3 ~ 9.2.0 | - |
|
II. Public POCs for CVE-2026-72506
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-72506
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-72506 (1)
Vendor Pages for CVE-2026-72506 (2)
IV. Related Vulnerabilities
Same weakness: CWE-941
-
CVE-2026-40118
Arcserve UDP Console 安全漏洞 -
CVE-2025-53899
Kiteworks MFT is vulnerable to an Incorrectly Specified Dest -
CVE-2023-33198
Incorrectly Specified Chat Message Destinations in tgstation -
CVE-2022-4847
Incorrectly Specified Destination in a Communication Channel -
CVE-2019-18242
Moxa IOxpress configuration utility和ioLogik 2500 安全漏洞
V. Comments for CVE-2026-72506
No comments yet