Rakuten vulnerabilities
We track 3 vulnerabilities in Rakuten products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.
Latest Rakuten vulnerabilities
- 9.8 Critical severity
Rakuten Viber Cloak - Android: Use of a Broken or Risky Cryptographic Algorithm
Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection (DPI) systems to trivially identify and block proxy traffic, u
- 8.8 High severity
Rakuten Turbo 5G: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS co
- 9.8 Critical severity
Rakuten Casa: Use of Hard-coded Credentials
Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation.