CVE-2026-107153

MEDIUM 6.6

CVSS Score

6.6

EPSS Score

0.0%

EPSS Percentile

0th

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.

Vendor	rakuten mobile, inc.
Product	rakuten mini
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for rakuten mobile, inc. rakuten mini

Be the first to know when new medium vulnerabilities affecting rakuten mobile, inc. rakuten mini are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Versions

Rakuten Mobile, Inc. / Rakuten Mini

all versions

Rakuten Mobile, Inc. / Rakuten Hand

all versions

Rakuten Mobile, Inc. / Rakuten Hand 5G

all versions

Rakuten Mobile, Inc. / Rakuten BIGs

all versions

References

NVD ↗ CVE.org ↗ EPSS Data ↗