CVE-2026-73537 Japan Science and Technology Agency (JST) CVE debrief

Who should care

Users of Miraikan Assist App, security teams, and vulnerability management teams should verify their installations and apply patches when available. They should also review compensating controls for exposed systems and monitor for suspicious activity. Additionally, operators and platform administrators should be aware of the potential impact and take necessary precautions.

Technical summary

Cross-site scripting vulnerability exists in Miraikan Assist App. If exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product. This could result in the displayed content being altered. The vulnerability has a CVSS score of 5.1 and is classified as MEDIUM severity. Users should verify their installations and apply patches when available. The affected product context indicates that Miraikan Assist App is vulnerable, and defenders should focus on verifying affected product deployments and reviewing official advisories for guidance.

Defensive priority

Medium priority given the CVSS score of 5.1 and the potential for arbitrary script execution.

Recommended defensive actions

• Inventory and verify affected products
• Apply vendor remediation when available
• Monitor for suspicious activity
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs for exposed assets
• Track exceptions and retest remediated assets
• Confirm whether affected product deployments exist in managed environments

Evidence notes

Evidence is limited; primary official records indicate a cross-site scripting vulnerability in Miraikan Assist App, allowing arbitrary script execution in the browser component. Defenders should verify affected product deployments, review official advisories, and plan vendor-supported updates or mitigations. The CVE record was published on 2026-08-21T08:16:44.003Z and has not been modified since then. However, additional review is recommended to ensure accurate affected scope and severity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.