Electronic delivery item Inspection Support System — security advisory

{
  "id": "a421df9fdce560707fc042e6f959c78353f18668f97f0fcec8aaed96b422371f",
  "url": "https://www.cve.org/CVERecord?id=CVE-2026-113345",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2026-113345",
    "summary": "Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.",
    "evidence": "cve:CVE-2026-113345",
    "products": [
      {
        "name": {
          "value": "Electronic delivery item Inspection Support System",
          "evidence": "/containers/cna/affected/0/product"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-113345",
      "aliases": [
        "CVE-2026-113345"
      ],
      "metrics": [
        {
          "format": "CVSS",
          "cvssV3_0": {
            "version": "3.0",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
          },
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        },
        {
          "format": "CVSS",
          "cvssV4_0": {
            "version": "4.0",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
          },
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "affected": [
        {
          "vendor": "Ministry of Land, Infrastructure, Transport and Tourism, Japan",
          "product": "Electronic delivery item Inspection Support System",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "Ver.4.0.36"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ],
      "modified": "2026-10-26T14:35:20.967Z",
      "provider": "cve",
      "references": [
        "https://www.ysk.nilim.go.jp/cals/",
        "https://jvn.jp/en/jp/JVN75668103/"
      ],
      "provider_metadata": {
        "adp": [
          {
            "title": "CISA ADP Vulnrichment",
            "metrics": [
              {
                "other": {
                  "type": "ssvc",
                  "content": {
                    "id": "CVE-2026-113345",
                    "role": "CISA Coordinator",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "version": "2.0.3",
                    "timestamp": "2026-10-26T13:30:55.453904Z"
                  }
                }
              }
            ],
            "providerMetadata": {
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP",
              "dateUpdated": "2026-10-26T14:35:20.967Z"
            }
          }
        ],
        "cna": {
          "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
          "shortName": "jpcert",
          "dateUpdated": "2026-10-26T04:43:59.645Z"
        }
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-113345",
        "evidence": "/cveMetadata/cveId"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/containers/cna/metrics"
  },
  "source_id": "core-cve",
  "document_id": 311572,
  "published_at": "2026-10-26T04:43:59.645+00:00"
}