CVE-2026-75553: Low severity Tohoku Electric Power Yorisou e Net vulnerability
Published Sep 25, 2026
·Updated
Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the affected product.
Affected Software
1 affected component
Tohoku Electric Power Yorisou e Net
Event History
Sep 25, 2026
CVE Published
via MITRE·06:25 AM
Data Sourced
via MITRE·06:25 AM
DescriptionSeverity
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The vector is listed as physical, with no privileges or user interaction required. An attacker would need access to the affected smartphone application in order to retrieve the embedded cryptographic key.
2
What is the likely security impact?
The reported impact is limited to confidentiality, with no integrity or availability impact indicated. The issue is rated low severity with a 2.4 score.
3
Which product should be reviewed?
Review deployments of Tohoku Electric Power's Yorisou e Net smartphone application. The provided references include both Google Play and Apple App Store listings.