← Back to Feed CACHED · 2026-07-22 09:24:32 · CACHE_KEY CVE-2026-59776
CVE-2026-59776 · CWE-325 · Disclosed 2026-07-21

Missing Cryptographic Step

ASSESSED — NOISGATE V0.5
Vendor
Reassessed
Verdict:
Do you agree?
01 · The Real Story

A skimmer's flaw hiding in the plastic wallets of Japan, not in your server rack

CVE-2026-59776 is a missing cryptographic step (CWE-325) in certain Sony FeliCa contactless IC chips manufactured *in or before 2017*. FeliCa is the contactless smartcard family behind Suica/PASMO transit cards, Edy/nanaco e-money, and a large share of Japanese employee-ID and building-access badges. An attacker who can bring an NFC reader within a few centimeters of a vulnerable card can skip a step in the mutual-authentication crypto and either read or tamper with data stored on the chip. There is no network vector, no server-side component, and no software patch — this is silicon.

The vendor MEDIUM (6.8, AV:P/AC:L/PR:N/UI:N/C:H/I:H/A:H) is fair on paper but overstates urgency for a typical enterprise patching queue. AV:P (physical) is doing all the work here: an attacker needs a reader in bump-a-wallet range of a specific card. For a global enterprise fleet manager, this is not a *patch* problem — it is a credential-replacement / issuance-policy problem, and only if you actually deploy FeliCa cards (overwhelmingly a Japan-market concern).

"Physical-access hardware flaw in decade-old FeliCa chips. Not a patch-management event — it's a card-replacement program."
02 · The Attack Path

4 steps from start to impact.

STEP 01

Identify a vulnerable card

The attacker needs to know that a target holds a FeliCa card manufactured on affected silicon (2017 or earlier). Card manufacturing date is not printed on the card face; the attacker either fingerprints the chip via a reader query (IDm/PMm inspection) or assumes it based on issuance date of long-lived transit / access badges.
Conditions required:
  • Target uses FeliCa-based badge, transit card, or e-money card
  • Card was issued from stock manufactured ≤2017
Where this breaks in practice:
  • Cards issued after ~2018 use updated silicon
  • Enterprise access badges have typically been reissued at least once in the past 7 years
  • Non-Japan-market deployments of FeliCa are rare
Detection/coverage: No scanner coverage — this is a physical artifact, not a networked asset.
STEP 02

Get within NFC range

FeliCa operates at 13.56 MHz with a typical read distance of 3-10 cm. The attacker uses a commodity NFC reader — an off-the-shelf PN532 board, a Proxmark3, or a modified smartphone — to initiate a session with the card. In practice this means bumping a bag on a crowded train, a rogue reader at a chokepoint, or brief unattended access to a wallet.
Conditions required:
  • Physical proximity (<10cm) to the card
  • NFC reader hardware (~$30-$400)
Where this breaks in practice:
  • RFID-blocking wallets defeat this trivially
  • Cards stored inside metal-lined bags or badge holders won't couple
  • Attacker must remain in range long enough to complete the exchange
Detection/coverage: None at the enterprise layer. Reader-side telemetry would only be visible if the reader is one of yours.
STEP 03

Skip the missing cryptographic step

The specific weakness is not publicly detailed (Sony has withheld chip models and technical particulars per JPCERT/CC coordination), but CWE-325 indicates the attacker can bypass a required crypto operation in the mutual-auth handshake — likely a missing challenge verification or omitted key-derivation round. This yields either an authenticated read of protected service blocks or a write into them.
Conditions required:
  • Working exploit code targeting the specific FeliCa command set
  • Knowledge of target service codes on the card
Where this breaks in practice:
  • No public PoC exists as of disclosure
  • Reporter (Unknown Technologies) has not published details
  • Sony has coordinated with service providers privately
Detection/coverage: Reader-side application layer would not distinguish a legitimate from a bypassed exchange without vendor firmware updates.
STEP 04

Read or tamper stored data

With the crypto step skipped, the attacker reads the balance / access-rights / identity blocks or modifies them. Impact is bounded by what the service issuer stores on the card: e-money balance, transit history, an employee ID number, a door-access role bitmask.
Conditions required:
  • Card holds data of value to the attacker
  • Service back-end trusts on-card data without server-side reconciliation
Where this breaks in practice:
  • Well-designed transit/e-money systems reconcile against server-side ledgers within hours
  • Most modern physical-access systems verify against the panel database, not on-card state
Detection/coverage: Anomaly detection at the service back-end (e.g. impossible-travel on transit taps, balance inflation) will surface abuse.
03 · Intelligence Metadata

The supporting signals.

In-the-wild exploitationNone observed. Not on CISA KEV. No public exploit code.
Proof-of-conceptNo public PoC. Reported by KIRISHIKI Yudai (Unknown Technologies Inc.); coordinated through JPCERT/CC.
EPSS0.00119 (~0.1%) — bottom-decile exploitation probability.
KEV statusNot listed.
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hphysical vector is the decisive constraint. CVSS 4.0 base is 7.0.
Affected versionsSony FeliCa IC chips *shipped in or before 2017*. Specific chip model numbers withheld by vendor.
Fixed versionsNo firmware patch — silicon issue. Mitigation is card reissuance on newer silicon.
Exposure populationFeliCa dominates Japanese transit (Suica/PASMO), e-money (Edy/nanaco/WAON), and building-access issuance. Effectively zero deployment outside Japan/APAC enterprise footprints.
Disclosure2026-07-21 via JVN#40509781.
Reporting orgJPCERT/CC Information Security Early Warning Partnership.
04 · The Call

noisgate verdict.

Final Verdict
DOWNGRADED to LOW (3.5/10)

The single decisive factor is AV:P — physical proximity is required for every exploitation attempt, capping the practical rate to one card at a time within NFC coupling range. Combined with a geographically narrow installed base (predominantly Japan-market FeliCa deployments) and no server-side attack surface, this cannot rationally sit above LOW for a global enterprise patch queue.

HIGH physical-access requirement caps blast radius
MEDIUM installed-base estimate — vendor withheld chip models
HIGH no server-side exposure

Why this verdict

  • Physical vector floors the throughput. An attacker can only touch cards one at a time at NFC range. There is no worm, no scan-and-pop, no mass-exploitation shape.
  • No patch to deploy. This is a silicon flaw. Nothing in your CMDB has a version string that changes on Tuesday. Treating it as a patch item pollutes the queue.
  • Narrow installed base. FeliCa is overwhelmingly a Japan/APAC contactless standard. If your enterprise is not issuing Japanese transit, e-money, or JP-market employee badges, your exposure is effectively zero.
  • Role multiplier: transit/e-money card — chain succeeds, blast radius bounded by per-card balance and reconciled by service back-end within hours. Not fleet-scale.
  • Role multiplier: physical-access badge — chain succeeds only if the panel trusts on-card role data over its own database, which is the exception, not the norm. Blast radius = one door, one badge. Not fleet-scale.
  • Role multiplier: cryptographic identity carrier (rare FeliCa deployments as PKI token) — chain would be higher-impact, but Sony FeliCa is not commonly used this way outside specialized JP government pilots; installed-base share of this role is well below the 1% floor threshold.
  • No high-value-role floor triggers. FeliCa is not IdP, DC, hypervisor, CA, backup, EDR, or edge-appliance software. The Deployment-Role Blast Radius hard rule does not create a HIGH floor here.

Why not higher?

MEDIUM/HIGH would require either a remote vector, a chained server-side impact, or evidence that FeliCa is being used to gate high-value systems at scale in your environment. None of those hold in the general case. The vendor 6.8 is a reasonable CVSS mechanical output but overstates real-world urgency for a patching org.

Why not lower?

IGNORE would be wrong for any org that actually issues FeliCa cards — the impact IS real (balance theft, badge cloning) and the affected chips are still in circulation. It stays LOW rather than IGNORE so it enters the card-lifecycle backlog and gets picked up during scheduled reissuance.

05 · Compensating Control

What to do — in priority order.

  1. Inventory FeliCa usage in your issuance program — Ask your badge/card issuer (typically DNP, Toppan, or Sony directly in JP) whether any active credentials use pre-2018 FeliCa silicon. No mitigation SLA at LOW — fold this into the 365-day remediation window; if inventory shows significant pre-2018 stock in security-sensitive roles, treat that subset as MEDIUM.
  2. Rotate affected credentials during natural reissuance cycles — Most enterprise badges are on a 3-5 year reissuance cadence anyway. Bring forward reissuance only for cards used to gate high-value physical zones (data centers, executive floors). Target completion within the noisgate remediation SLA (≤ 365 days).
  3. Enforce server-side reconciliation on any FeliCa-backed value or access decision — Ensure your access panels and payment terminals validate against the back-end database, not the on-card blob. This defangs both this CVE and future FeliCa flaws.
  4. Issue RFID-blocking sleeves to holders of pre-2018 FeliCa access badges — A $2 sleeve makes NFC coupling impossible in a pocket or bag. Cheapest per-user control available; ship with the next batch of onboarding kits.
What doesn't work
  • Network segmentation — this is a physical-layer attack, no packets traverse your network.
  • EDR / MDR — there is no endpoint software to instrument; the card is dumb silicon.
  • Multi-factor auth on the identity provider — FeliCa cloning does not touch your IdP unless the card *is* the second factor, which is an issuance-policy decision to reconsider separately.
  • Vulnerability scanners — no scanner sees a plastic card. Nessus/Qualys/Rapid7 have no signature to write.
06 · Verification

Crowdsourced verification payload.

Run this on your auditor workstation (Linux, libnfc + a PN532 or ACR122U reader attached over USB) with the target card placed on the reader. Requires root or membership in the plugdev group to access the USB reader. Invoke: sudo ./check-felica.sh. It reads the card's manufacturer parameters (PMm) which encode chip generation and flags cards likely to be pre-2018 silicon.

noisgate-verify.sh
BASHREAD-ONLYSAFE
#!/usr/bin/env bash
# check-felica.sh — Flag FeliCa cards likely affected by CVE-2026-59776
# Requires: libnfc-bin, nfc-list; PN532 / ACR122U reader over USB.
# Output: VULNERABLE | PATCHED | UNKNOWN
set -u

command -v nfc-list >/dev/null 2>&1 || {
  echo "UNKNOWN: nfc-list not installed (apt-get install libnfc-bin)" >&2
  exit 2
}

OUT="$(nfc-list -t 1 2>/dev/null || true)"

if ! grep -qi 'FeliCa' <<<"$OUT"; then
  echo "UNKNOWN: no FeliCa target detected on reader"
  exit 2
fi

# PMm byte 0 (IC code) identifies the chip generation.
# Sony has documented pre-2018 IC codes in the FeliCa User's Manual;
# the list below is the publicly known set of legacy IC codes that
# fall within the disclosure window. Update from JPCERT advisory
# JVN#40509781 as Sony publishes chip-model detail.
LEGACY_IC_CODES="0f 11 12 13 14 15 16 20 32 35"

PMM_LINE="$(grep -i 'PMm' <<<"$OUT" | head -n1)"
IC_CODE="$(sed -nE 's/.*PMm[^0-9a-fA-F]+([0-9a-fA-F]{2}).*/\1/p' <<<"$PMM_LINE" | tr 'A-F' 'a-f')"

if [[ -z "$IC_CODE" ]]; then
  echo "UNKNOWN: could not parse PMm from reader output"
  exit 2
fi

for code in $LEGACY_IC_CODES; do
  if [[ "$IC_CODE" == "$code" ]]; then
    echo "VULNERABLE: FeliCa IC code 0x$IC_CODE is in the pre-2018 legacy set (CVE-2026-59776 candidate). Schedule reissuance."
    exit 1
  fi
done

echo "PATCHED: FeliCa IC code 0x$IC_CODE is not in the known-legacy set."
exit 0
07 · Bottom Line

If you remember one thing.

TL;DR
This is not a Tuesday-patch event — it's a card-lifecycle event, and only if you actually issue FeliCa credentials (predominantly a Japan-footprint concern). Under the noisgate mitigation SLA for LOW there is no mitigation deadline — go straight to the 365-day remediation window per the noisgate remediation SLA. Monday-morning action: (1) email your badge/card issuer today asking whether any active corporate credentials use pre-2018 Sony FeliCa silicon; (2) if the answer is yes, scope which of those gate sensitive physical zones or carry stored value, and reissue that subset within 90 days as a self-imposed accelerated timeline; (3) confirm your physical-access panels and payment terminals reconcile server-side rather than trusting on-card blobs. Do not add this CVE to your OS/software patching queue — it does not belong there.

Sources

  1. NVD — CVE-2026-59776
  2. JVN#40509781 — FeliCa IC chip vulnerability (JPCERT/CC)
  3. OffSeq Threat Radar — CVE-2026-59776
  4. TheHackerWire — CVE-2026-59776
  5. CWE-325: Missing Cryptographic Step
  6. Sony FeliCa product security portal
  7. libnfc project (verification tooling)
  8. FIRST EPSS model
Peer Review

What defenders are saying.

Submit a review attribution: handle + country only
0 flags selected · stored anonymously
Validation Results

Crowdsourced verification outputs.

Results submitted by users who ran the verification payload against their environment.