Improper access control vulnerability in Android application "ManabiPocket for Parents"

The Android application "ManabiPocket for Parents" by NTT DOCOMO BUSINESS, Inc. has an improper access control vulnerability. This issue could allow unauthorized access to certain application functions or data due to insufficient access restrictions. No specific affected versions or technical details are provided, and no known exploits are reported. Patch or remediation status is not confirmed.

• jvn.jp/en/jp/JVN72918755/ (opens in a new tab)

• ZDI-26-827: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution VulnerabilityMediumVulnerability2026-10-28
• ZDI-26-828: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityHighVulnerability2026-10-28
• Sleipnir Mobile for Android vulnerable to user interface misrepresentation of critical informationCriticalVulnerability2026-10-27
• Multiple Lenovo Tablets shipped with a known private test key for Android Verified BootHighVulnerability2026-10-20
• YuanKong RAT: the Android remote-control service that stamps its operators' names into every buildMalware2026-10-16