CyberSecBulletin

Rakuten Mobile vulnerabilities

We track 3 vulnerabilities in Rakuten Mobile products across 6 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.

3vulnerabilities
1critical
2high
0exploited
8.5average CVSS score

Latest Rakuten Mobile vulnerabilities

  • 7.0 High severity

    Rakuten Mini: Use of Weak Credentials

    CVE-2026-107153Rakuten Mobile

    Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.

  • 8.8 High severity

    Rakuten Turbo 5G: Improper Neutralization of Special Elements used in an OS Command

    CVE-2024-48895Rakuten MobileEPSS 1.03%

    Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS co

  • 9.8 Critical severity

    Rakuten Casa: Use of Hard-coded Credentials

    CVE-2022-29525Rakuten MobileEPSS 1.56%

    Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation.