Answer in brief
CVE-2026-96614 records a Medium severity (CVSS 5.1) vulnerability in CISA ADP Vulnrichment. The current sources do not mark it as known exploited. The current feed maps GEO CORPORATION/"ゲオアプリ" for Android (generic), GEO CORPORATION/"ゲオアプリ" for iOS (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.1. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps GEO CORPORATION/"ゲオアプリ" for Android (generic), GEO CORPORATION/"ゲオアプリ" for iOS (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| GEO CORPORATION/"ゲオアプリ" for Androidgeneric | >=0 <=11.8.6 | Not reported |
| GEO CORPORATION/"ゲオアプリ" for iOSgeneric | >=0 <=11.8.6 | Not reported |
Published upstream
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.
Quoted source text, attributed separately from HOL analysis.