Rakuten

12 CVEs across 6 Rakuten products. Browse Rakuten vulnerabilities, severities, and proof-of-concept exploits.

Rakuten products with known CVEs

ProductCVEs
Viber6
Casa3
Ichiba1
Rakuma1
Wifi Pocket1
Wifi Pocket Firmware1
Rakuten CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-13476Critical9.82026-03-05Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension dive…
CVE-2025-55996Medium6.32025-09-12Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface
CVE-2024-41918Medium6.12024-08-29'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorization in handler for…
CVE-2023-40282Medium5.42023-08-23Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen. As a…
CVE-2022-29525Critical9.82022-06-13Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privileg…
CVE-2022-28704High7.22022-06-13Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform…
CVE-2022-26834High7.52022-06-13Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the produ…
CVE-2020-14049High7.52020-06-22Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a v…
CVE-2018-3987Medium5.52020-02-13An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6. The 'Secret Chats' function…
CVE-2019-6024Medium6.52019-12-26Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's aut…
CVE-2019-18800High8.82019-11-06Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Viber protocol traffi…
CVE-2019-12569High7.82019-06-03A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is…