VulnSocial

CVE-2026-59776Disclosure

LOWCVSS 7.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-325

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 9 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • Disclosure: 7 classified signals
  • General: 2 classified signals
  • Peaked 2d ago at 5 mentions (2026-07-21); latest day: 1
  • 9 total mentions across 3 days

Deep dive

Activity timeline9 mentions / 3d
01345Mentions · 2026-07-21: 5Mentions · 2026-07-22: 3Mentions · 2026-07-24: 1Patch / Workaround · 2026-07-21: 1Patch / Workaround · 2026-07-22: 2Technical Details · 2026-07-21: 2Technical Details · 2026-07-22: 107-2107-2207-24
Signal classification2 categories
Disclosure
777.8%
General
222.2%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-07-215
Disclosure4General1
2026-07-223
Disclosure3
2026-07-241
General1
Full discourse9 posts
  • 二本松哲也@t_nihonmatsu
    Disclosure

    FeliCaの一部ICチップ（2017年以前出荷）に脆弱性（CVE-2026-59776）が情報セキュリティ早期警戒パートナーシップに基づき公表されました。 なおソニーが公開している「アプリケーション開発におけるセキュリティの考え方 Version 2.0」には、このような事態を前提とした設計思想が示されています。 「セキュリティは製品ではなくシステム全体で実現する」 ソニーは、ICカード、リーダー／ライター、上位アプリケーション、運用管理を合わせた多層防御を前提にしています。 つまり、 「FeliCaが安全だからシステム全体も安全」 ではなく、 「FeliCaは防御層の一つ」 という考え方です。 これはゼロトラストの考え方にも非常に近いものです。

    Post summary

    Vulnerability CVE-2026-59776 in pre‑2017 FeliCa IC chips was disclosed by the Information Security Early Warning Partnership; the text outlines Sony’s holistic security approach but provides no PoC, exploit code, or patch details.

    01303651.7K
    18.0K followersView on X
  • 青木ゆうき | AokiApp CEO@9774_8380_6896
    Disclosure

    日本の技術すごい勢の心の拠り所 FeliCa の旧チップにある脆弱性のCVEが発表されたらしい 暗号化処理に不備があるそう CVE-2026-59776 https://www.cve.org/CVERecord?id=CVE-2026-59776

    Post summary

    A CVE for a flaw in FeliCa’s legacy chip encryption processing has been announced; no proof‑of‑concept, exploit tool, active exploitation, patch, or false‑positive claim is disclosed.

    1211041.9K
    814 followersView on X
  • セキュリティ対策Lab@securityLab_jp
    Disclosure

    FeliCa ICチップの脆弱性がJVNで正式公表、CVE-2026-59776を採番-JCBもQUICPayでの採用と対策実施を表明 https://rocket-boys.co.jp/security-measures-lab/felica-cve-2026-59776-jvn-advisory/ #セキュリティ対策Lab #security #securitynews #脆弱性

    Post summary

    An official JVN announcement introduced CVE-2026-59776, a FeliCa IC‑chip vulnerability, and JCB announced plans to adopt QUICPay and implement countermeasures.

    01020402
    625 followersView on X
  • Autumn Good@autumn_good_35
    General

    2026/07/21 CVE-2026-59776 JVN#40509781 非接触型ICカード技術FeliCaの一部のICチップにおける脆弱性 https://jvn.jp/jp/JVN40509781/

    Post summary

    The text announces the existence of CVE-2026-59776 affecting certain FeliCa IC cards, linking to a JVN article, but provides no technical or operational details.

    11000614
    6.9K followersView on X
  • サイトドック｜Webセキュリティ解説 一ノ瀬あかり@sitedock_jp
    Disclosure

    旧型FeliCaチップ18億枚以上に修正不可の脆弱性（CVE-2026-59776）をJVNが正式発表しました。サイドチャネル攻撃で暗号鍵抽出のおそれ、ただし攻撃には物理アクセスが必要で現時点の実害はなし。モバイルSuicaは対象外。 #FeliCa #脆弱性 #Suica https://t.co/NnjZ2tYOcu

    Post summary

    JVN formally announced CVE‑2026‑59776, an unpatchable side‑channel flaw in over 1.8 billion old FeliCa chips that could allow key extraction with physical access but has shown no real‑world impact yet.

    00010229
    11 followersView on X
  • しーにゃ♪@公式@Syynya
    Disclosure

    FeliCa(フェリカ) ICチップの脆弱性がJVNで正式公表、CVE-2026-59776を採番-JCBもQUICPayでの採用と対策実施を表明 https://rocket-boys.co.jp/security-measures-lab/felica-cve-2026-59776-jvn-advisory/

    Post summary

    The advisory announces the formal JVN disclosure of a FeliCa IC chip vulnerability (CVE‑2026‑59776), with JCB confirming countermeasure implementation for QUICPay.

    01000168
    917 followersView on X
  • pirorin@pirorin_blog
    General

    SuicaやPASMOへの影響が気になる方へ。FeliCaの脆弱性「CVE-2026-59776」がJVNで正式公開されました。影響を受ける条件や、なぜ利用者は過度に心配しなくてよいのか、サービス全体の対策も含めて実務目線で分かりやすく解説しています。 https://pirorin.com/felica-vulnerability-suica-pasmo-cve-2026-59776/

    Post summary

    The text announces the official release of the CVE‑2026‑59776 vulnerability for FeliCa, noting that an article explains the conditions of impact, reasons for user concern, and overall service countermeasures.

    00000184
    2 followersView on X
  • きばっど～@fuyuigoro
    Disclosure

    FeliCa(フェリカ) ICチップの脆弱性がJVNで正式公表、CVE-2026-59776を採番-JCBもQUICPayでの採用と対策実施を表明 https://rocket-boys.co.jp/security-measures-lab/felica-cve-2026-59776-jvn-advisory/

    Post summary

    JVN officially published CVE-2026-59776, a vulnerability in FeliCa IC chips, and JCB announced it will implement countermeasures.

    00000142
    159 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-59776 Missing Cryptographic Step Vulnerability in FeliCa IC Chips Through 2017 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-59776

    Post summary

    CVE-2026-59776 reports a missing cryptographic step vulnerability in FeliCa IC chips; no PoC, exploit, patch, or active exploitation details are provided.

    00000174
    4.1K followersView on X

Explore more

Back to dashboard