CVE-2026-41281 identifies a cleartext transmission vulnerability in the Android app "あんしんフィルター for au" by KDDI CORPORATION. Sensitive information is transmitted without encryption, enabling attackers positioned in the network path to eavesdrop or alter communications. The vulnerability affects versions prior to 4.9_b0003. The CVSS 3.0 base score is 4.8, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity. No official remediation level or patch information is provided in the available data.

An attacker capable of intercepting network traffic could access or modify sensitive information transmitted by the affected app. This could lead to information disclosure or data tampering. The impact is limited to confidentiality and integrity, with no availability impact reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid using untrusted networks or consider additional network-level protections such as VPNs to reduce exposure to man-in-the-middle attacks. Monitor vendor communications for updates on patches or mitigations.