All vulnerabilities
CVE-2026-107153

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image ma

Rakuten Mobile, Inc. Rakuten Mini
Open in ThreatlineRecord JSON
CVSS
6.6Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 8% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
Published14 Oct 2026Updated 14 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version.

Description

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.

Text from CVE List

Affected versions 4

  • Rakuten Miniaffected: all versionsCVE List
  • Rakuten Handaffected: all versionsCVE List
  • Rakuten Hand 5Gaffected: all versionsCVE List
  • Rakuten BIGsaffected: all versionsCVE List

References 5