JVNVU#93068550
Sleipnir Mobile for iPhone/ iPad vulnerable to improper certificate validation
Overview
Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. are vulnerable to improper certificate verification.
Products Affected
- Sleipnir Mobile for iPhone / iPad versions v4.15.1 and earlier
- Sleipnir Mobile for iPhone / iPad Black Edition versions v4.15.1 and earlier
Description
Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. contain the following vulnerability.
- Improper Certificate Validation (CWE-295)
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 2.3
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N Base Score 4.2
- CVE-2026-116081
Impact
A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.
Solution
Update the Software
Update the software to the latest version. The developer has released the following versions to address this vulnerability:
- Sleipnir Mobile for iPhone / iPad v5.0 and later
- Sleipnir Mobile for iPhone / iPad Black Edition v4.16
Vendor Status
| Vendor | Link |
| Fenrir Inc. | Sleipnir Mobile App - App Store |
| Sleipnir Mobile Black Edition App - App Store (Text in Japanese) |
References
JPCERT/CC Addendum
Vulnerability Analysis by JPCERT/CC
Credit
Fenrir Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Fenrir Inc. coordinated under the Information Security Early Warning Partnership.
Other Information
| JPCERT Alert |
|
| JPCERT Reports |
|
| CERT Advisory |
|
| CPNI Advisory |
|
| TRnotes |
|
| CVE |
CVE-2026-116081 |
| JVN iPedia |
|