{"id":"CVE-2026-107153","title":"Multiple smartphones provided by Rakuten Mobile, Inc","summary":"Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-1391"],"vendor":"Rakuten Mobile, Inc.","product":"Rakuten Mini","affected":["rakuten_mini all versions","rakuten_hand all versions","rakuten_hand_5g all versions","rakuten_bigs all versions"],"published":"2026-10-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T20:39:32.067","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-107153","references":[{"url":"https://jvn.jp/en/jp/JVN47427200/","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-big-s/support/index.html","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand-5g/support/index.html","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand/support/index.html","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-mini/support/index.html","label":"vultures@jpcert.or.jp"}],"tags":["nvd","cve.org"],"epss":0.00196,"epssPercentile":0.09184,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-14T16:04:35.274479Z"},"ingestedAt":"2026-10-14T07:21:04.828Z","slug":"CVE-2026-107153","body":"## Overview\n\nMultiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":36.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}