SEC.co
Emergency

By weakness (CWE)

CWE-926: related vulnerabilities

CVEs classified under CWE-926. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2025-68713HIGH 8.0

    Rakuten Send Anywhere version 23.2.9 for Android contains a flaw that allows any app on a user's device—even one without file access permissions—to secretly force downloads into Send Anywhere's storage. Those files then show up in the app's trusted "Received" interface, making them appear legitimate. An attacker can exploit this to push malicious APK files (which the user might then install) or flood the app with huge files to crash or slow down the device.