PatchTheCVErakuten vulnerabilities
Recent CVEs affecting rakuten products. 3 tracked.
rakuten has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-03-05. Highest priority: CVE-2025-13476 (score 47/100).
- CVE-2025-55996 MEDIUM 6.3 UPGRADE Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward int
- CVE-2025-13476 CRITICAL 9.8 UPGRADE DOWNGRADE Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable T
- CVE-2024-41918 MEDIUM 6.1 UPGRADE UPGRADE 'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vu
FAQ
How do I fix rakuten vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rakuten being exploited right now?
None of the tracked rakuten CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rakuten CVE should I patch first?
CVE-2025-13476 currently ranks highest (47/100): Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable T.