{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000126.html",
  "dc:date": "2026-09-01T16:03+09:00",
  "dcterms:issued": "2026-09-01T16:03+09:00",
  "dcterms:modified": "2026-09-01T16:03+09:00",
  "description": "PALLET CONTROL products provided by JAL Information Technology Co., Ltd. include multiple service programs that run in the background and provide certain functions. However, access to these service programs is not properly restricted, allowing non-administrative users to access them.\u003ca href=\u0027https://cwe.mitre.org/data/definitions/276.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eImproper access control in interprocess communication (CWE-276) - CVE-2026-81302\u003c/li\u003e\u003c/ul\u003eHiromichi Kurosu and Masatsugu Ueda of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000126.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:misc:jal_digital_palletcontrol_10",
      "@product": "PalletControl 10",
      "@vendor": "JAL Digital Co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:misc:jal_digital_palletcontrol_cloud",
      "@product": "PalletControl Cloud",
      "@vendor": "JAL Digital Co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:misc:jal_digital_pallet_control",
      "@product": "PALLET CONTROL",
      "@vendor": "JAL Digital Co.,Ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.8",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-000126",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN84094853/index.html",
      "@id": "JVN#84094853",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-81302",
      "@id": "CVE-2026-81302",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "PALLET CONTROL products vulnerable to improper access control"
}