CVE-2026-113345 Ministry of Land, Infrastructure, Transport and Tourism, Japan CVE debrief

Who should care

Defenders responsible for Electronic delivery item Inspection Support System deployments, particularly those using versions up to Ver.4.0.36, should assess exposure and prioritize verification and mitigation.

Why it matters

CVE-2026-113345 is a high-severity vulnerability in Electronic delivery item Inspection Support System that may allow arbitrary code execution. Defenders should prioritize verification, patching, and monitoring to prevent potential exploitation.

• Verify vulnerability in Electronic delivery item Inspection Support System versions up to Ver.4.0.36
• Apply patches or mitigations as available to prevent potential tampering or exploitation
• Monitor system logs for potential tampering or exploitation attempts

Technical summary

The Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution. The vulnerability exists in versions up to Ver.4.0.36. Defenders should prioritize verifying the vulnerability and applying patches or mitigations as available to prevent potential tampering or exploitation. The CVE record and source item provide details on the improper file access permission vulnerability in Electronic delivery item Inspection Support System.

Defensive priority

Defenders should prioritize verifying the vulnerability in Electronic delivery item Inspection Support System versions up to Ver.4.0.36 and applying patches or mitigations as available.

Recommended defensive actions

• Verify the vulnerability in Electronic delivery item Inspection Support System versions up to Ver.4.0.36
• Apply patches or mitigations as available
• Monitor system logs for potential tampering or exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the improper file access permission vulnerability in Electronic delivery item Inspection Support System. The vulnerability may allow tampering with files in the installation folder, potentially leading to arbitrary code execution.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.