CVE-2026-75559: Insertion of sensitive information into sent data in Ministry of Land, Infrastructure, Transport and Tourism Vehicle Inspection Certificate Viewer (for Android)

CVE-2026-75559 identifies a vulnerability in the 'Vehicle Inspection Certificate Viewer' Android app where sensitive information such as API integration credentials (access ID and access key) may be inserted into transmitted data. This exposure could potentially allow unauthorized parties to obtain these credentials. The vulnerability is rated medium severity with a CVSS 3.0 base score of 5.3, reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality impact. No vendor advisory or patch information is available to confirm remediation status.

The vulnerability may lead to the exposure of sensitive API credentials, which could be used to access backend services or APIs improperly. However, the impact is limited to confidentiality with no reported integrity or availability effects. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users and administrators should be cautious about the app's data transmissions and monitor for updates from the Ministry of Land, Infrastructure, Transport and Tourism regarding a security patch.