CVE-2026-41281 identifies a cleartext transmission vulnerability in the Android app "あんしんフィルター for au" by KDDI CORPORATION. The vulnerability (CWE-319) permits an attacker positioned in a man-in-the-middle role to access and alter sensitive information transmitted in plaintext. This affects app versions prior to 4.9_b0003. The CVSS 3.0 base score is 4.8, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No vendor advisory or patch information is currently available.

An attacker capable of intercepting network traffic can access and modify sensitive information transmitted by the vulnerable app, potentially leading to information disclosure and data tampering. The impact is limited to confidentiality and integrity with no reported effect on availability. There are no known active exploits targeting this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid using untrusted networks or employ VPNs to reduce exposure to man-in-the-middle attacks. Monitor official KDDI CORPORATION communications for updates regarding patches or mitigations.