CVE-2026-75553
Low
Description
Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the affected product.
SeverityLow
CVSS2.4
Exploit probability—
ProductTohoku Electric Power "Yorisou e Net" Android App
PublishedSep 25, 2026
First seenSep 25, 2026
Weakness typeCWE-321CWE-321
How to fix
Update
- Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" Android App2.8.0 or later
- Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" iOS App2.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" Android App | v < 2.8.0 | 2.8.0 |
| Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" iOS App | v < 2.8.0 | 2.8.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.