Geo Corporation CVEs and Security Vulnerabilities

CVE-2026-96614

Improper Authorization in Custom URL Scheme Allows Phishing and Session ID Disclosure in GEO Corporation's App

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Geo Corporation

Products

"ゲオアプリ" For Android "ゲオアプリ" For Ios

CVE-2026-105271

Cleartext Storage of User Passwords in GEO ’ゲオアプリ’ Applications

"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application.