CVE-2026-72506: National Institute Of Information And Communications Technology Voicetravoice Translator For Android

Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days.

VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.

Affected products

• National Institute Of Information And Communications Technology Voicetravoice Translator For Android: from 9.1.3, up to and including 9.2.0
• National Institute Of Information And Communications Technology Voicetravoice Translator For IOS: from 9.1.3, up to and including 9.2.0

Published 2026-08-13. Last modified 2026-08-28.