{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-0322", "aliases": [], "title": "Cloud NGFW / PAN-OS / Prisma Access：コード実行", "summary": "Palo Alto Networks の PAN-OS 管理インターフェースに認証された攻撃者がネットワーク経由でアクセスできると、ファイアウォール上で root 権限の任意コードを実行できるリモートコード実行脆弱性があります。", "risk": "認証された攻撃者がネットワークから管理インターフェースにアクセスできると、ファイアウォール上で root 権限の任意コードを実行できる。", "product": "Cloud NGFW / PAN-OS / Prisma Access", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "4.0", "cvssSource": "palo_alto", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red", "affected": [ { "product": "PAN-OS", "range": ">= 12.2.0 / < 12.2.4 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 12.2.4から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 12.1.0 / < 12.1.10-h2 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 12.1.4-h12から影響なし, 12.1.7-h8から影響なし, 12.1.10-h2から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.2.0 / < 11.2.16 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.2.4-h22から影響なし, 11.2.7-h21から影響なし, 11.2.10-h15から影響なし, 11.2.13-h3から影響なし, 11.2.16から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.1.0 / < 11.1.16-h3 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.1.4-h37から影響なし, 11.1.6-h39から影響なし, 11.1.7-h11から影響なし, 11.1.10-h35から影響なし, 11.1.13-h15から影響なし, 11.1.16-h3から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 10.2.0 / < 10.2.18-h12 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 10.2.7-h38から影響なし, 10.2.10-h41から影響なし, 10.2.13-h26から影響なし, 10.2.16-h11から影響なし, 10.2.18-h12から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0322", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-0322", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2026-0322", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-14T17:26:52.448Z", "modifiedAt": "2026-10-15T03:57:17.169Z", "fetchedAt": "2026-10-23T02:43:40.568Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\n\n\n\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma® Access are not impacted by this vulnerability.", "sourceTitle": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "versions": [ { "status": "unaffected", "version": "All", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Palo Alto Networks", "product": "PAN-OS", "versions": [ { "status": "affected", "version": "12.2.0", "lessThan": "12.2.4", "changes": [ { "at": "12.2.4", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "12.1.0", "lessThan": "12.1.10-h2", "changes": [ { "at": "12.1.4-h12", "status": "unaffected" }, { "at": "12.1.7-h8", "status": "unaffected" }, { "at": "12.1.10-h2", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "11.2.0", "lessThan": "11.2.16", "changes": [ { "at": "11.2.4-h22", "status": "unaffected" }, { "at": "11.2.7-h21", "status": "unaffected" }, { "at": "11.2.10-h15", "status": "unaffected" }, { "at": "11.2.13-h3", "status": "unaffected" }, { "at": "11.2.16", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "11.1.0", "lessThan": "11.1.16-h3", "changes": [ { "at": "11.1.4-h37", "status": "unaffected" }, { "at": "11.1.6-h39", "status": "unaffected" }, { "at": "11.1.7-h11", "status": "unaffected" }, { "at": "11.1.10-h35", "status": "unaffected" }, { "at": "11.1.13-h15", "status": "unaffected" }, { "at": "11.1.16-h3", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "10.2.0", "lessThan": "10.2.18-h12", "changes": [ { "at": "10.2.7-h38", "status": "unaffected" }, { "at": "10.2.10-h41", "status": "unaffected" }, { "at": "10.2.13-h26", "status": "unaffected" }, { "at": "10.2.16-h11", "status": "unaffected" }, { "at": "10.2.18-h12", "status": "unaffected" } ], "versionType": "custom" } ], "defaultStatus": "unaffected", "cpes": [ "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*" ] }, { "vendor": "Palo Alto Networks", "product": "Prisma Access", "versions": [ { "status": "unaffected", "version": "All", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-0322", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "fetchedAt": "2026-10-23T02:43:40.568Z", "publishedAt": "2026-10-14T17:26:52.448Z", "modifiedAt": "2026-10-15T03:57:17.169Z", "state": "published", "provider": "palo_alto", "title": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface", "descriptions": [ { "lang": "en", "value": "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\n\n\n\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma® Access are not impacted by this vulnerability.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "All", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "Palo Alto Networks", "product": "PAN-OS", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "12.2.0", "lessThan": "12.2.4", "versionType": "custom", "status": "affected", "changes": [ { "at": "12.2.4", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "12.1.0", "lessThan": "12.1.10-h2", "versionType": "custom", "status": "affected", "changes": [ { "at": "12.1.4-h12", "status": "unaffected" }, { "at": "12.1.7-h8", "status": "unaffected" }, { "at": "12.1.10-h2", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "11.2.0", "lessThan": "11.2.16", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.2.4-h22", "status": "unaffected" }, { "at": "11.2.7-h21", "status": "unaffected" }, { "at": "11.2.10-h15", "status": "unaffected" }, { "at": "11.2.13-h3", "status": "unaffected" }, { "at": "11.2.16", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "11.1.0", "lessThan": "11.1.16-h3", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.1.4-h37", "status": "unaffected" }, { "at": "11.1.6-h39", "status": "unaffected" }, { "at": "11.1.7-h11", "status": "unaffected" }, { "at": "11.1.10-h35", "status": "unaffected" }, { "at": "11.1.13-h15", "status": "unaffected" }, { "at": "11.1.16-h3", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "10.2.0", "lessThan": "10.2.18-h12", "versionType": "custom", "status": "affected", "changes": [ { "at": "10.2.7-h38", "status": "unaffected" }, { "at": "10.2.10-h41", "status": "unaffected" }, { "at": "10.2.13-h26", "status": "unaffected" }, { "at": "10.2.16-h11", "status": "unaffected" }, { "at": "10.2.18-h12", "status": "unaffected" } ] } ] }, { "vendor": "Palo Alto Networks", "product": "Prisma Access", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "All", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [ { "lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\n\n PAN-OS 12.2\n\n 12.2.0 through 12.2.3\n Upgrade to 12.2.4 or later.\n \n PAN-OS 12.1\n\n 12.1.8 through 12.1.10-h* \n Upgrade to 12.1.10-h2 or later.\n \n \n 12.1.5 through 12.1.7-h*\n Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n\n \n \n 12.1.2 through 12.1.4-h*\n\n Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n \n PAN-OS 11.2\n\n 11.2.14 through 11.2.15 \n Upgrade to 11.2.16 or later.\n \n \n 11.2.11 through 11.2.13-h*\n Upgrade to 11.2.13-h3 or 11.2.16 or later.\n \n \n 11.2.8 through 11.2.10-h*\n\n Upgrade to 11.2.10-h15 or 11.2.16 or later.\n \n \n 11.2.5 through 11.2.7-h*\n Upgrade to 11.2.7-h21 or 11.2.16 or later.\n\n \n \n 11.2.0 through 11.2.4-h*\n Upgrade to 11.2.4-h22 or 11.2.16 or later.\n \n PAN-OS 11.1\n\n 11.1.14 through 11.1.16-h*\n Upgrade to 11.1.16-h3 or later.\n \n \n 11.1.11 through 11.1.13-h*\n\n Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n \n \n 11.1.8 through 11.1.10-h*\n Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n \n \n 11.1.7 through 11.1.7-h*\n Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n \n \n 11.1.5 through 11.1.6-h*\n Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n \n \n 11.1.0 through 11.1.4-h*\n Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n \n PAN-OS 10.2\n\n 10.2.17 through 10.2.18-h*\n Upgrade to 10.2.18-h12 or later.\n \n \n 10.2.14 through 10.2.16-h*\n Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n \n \n 10.2.11 through 10.2.13-h*\n Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n \n \n 10.2.8 through 10.2.10-h*\n Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n \n \n 10.2.0 through 10.2.7-h*\n Upgrade to 10.2.7-h38 or 10.2.18-h12 or later.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [ { "lang": "eng", "value": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability:\n\n\n\n\n\n * Route incoming traffic for the MGT port through a DP port https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba , e.g., enabling management profile on a DP interface for management access.\n\n * Replace the Certificate for Inbound Traffic Management https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c .\n * Decrypt inbound traffic to the management interface so the firewall can inspect it https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2 .\n * Enable threat prevention on the inbound traffic to management services.\n\n\n\n\nPlease note that this Threat ID requires SSL Decryption.", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [ { "lang": "en", "value": "Very limited exploitation has been observed targeting the Palo Alto Networks management interface.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "palo_alto", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red", "baseScore": 8.5, "baseSeverity": "HIGH", "provider": "palo_alto", "sourcePath": "/containers/cna/metrics/1/cvssV4_0" } ], "references": [ { "url": "https://security.paloaltonetworks.com/CVE-2026-0322", "label": "palo_alto", "tags": [ "vendor-advisory" ], "provider": "palo_alto", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0322", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Cloud NGFW\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"PAN-OS\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.2.0\",\"lessThan\":\"12.2.4\",\"changes\":[{\"at\":\"12.2.4\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"12.1.0\",\"lessThan\":\"12.1.10-h2\",\"changes\":[{\"at\":\"12.1.4-h12\",\"status\":\"unaffected\"},{\"at\":\"12.1.7-h8\",\"status\":\"unaffected\"},{\"at\":\"12.1.10-h2\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.16\",\"changes\":[{\"at\":\"11.2.4-h22\",\"status\":\"unaffected\"},{\"at\":\"11.2.7-h21\",\"status\":\"unaffected\"},{\"at\":\"11.2.10-h15\",\"status\":\"unaffected\"},{\"at\":\"11.2.13-h3\",\"status\":\"unaffected\"},{\"at\":\"11.2.16\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.1.0\",\"lessThan\":\"11.1.16-h3\",\"changes\":[{\"at\":\"11.1.4-h37\",\"status\":\"unaffected\"},{\"at\":\"11.1.6-h39\",\"status\":\"unaffected\"},{\"at\":\"11.1.7-h11\",\"status\":\"unaffected\"},{\"at\":\"11.1.10-h35\",\"status\":\"unaffected\"},{\"at\":\"11.1.13-h15\",\"status\":\"unaffected\"},{\"at\":\"11.1.16-h3\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.18-h12\",\"changes\":[{\"at\":\"10.2.7-h38\",\"status\":\"unaffected\"},{\"at\":\"10.2.10-h41\",\"status\":\"unaffected\"},{\"at\":\"10.2.13-h26\",\"status\":\"unaffected\"},{\"at\":\"10.2.16-h11\",\"status\":\"unaffected\"},{\"at\":\"10.2.18-h12\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Prisma Access\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\n\n\n\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma® Access are not impacted by this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Version\nMinor Version\nSuggested Solution\n\n PAN-OS 12.2\n\n 12.2.0 through 12.2.3\n Upgrade to 12.2.4 or later.\n \n PAN-OS 12.1\n\n 12.1.8 through 12.1.10-h* \n Upgrade to 12.1.10-h2 or later.\n \n \n 12.1.5 through 12.1.7-h*\n Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n\n \n \n 12.1.2 through 12.1.4-h*\n\n Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n \n PAN-OS 11.2\n\n 11.2.14 through 11.2.15 \n Upgrade to 11.2.16 or later.\n \n \n 11.2.11 through 11.2.13-h*\n Upgrade to 11.2.13-h3 or 11.2.16 or later.\n \n \n 11.2.8 through 11.2.10-h*\n\n Upgrade to 11.2.10-h15 or 11.2.16 or later.\n \n \n 11.2.5 through 11.2.7-h*\n Upgrade to 11.2.7-h21 or 11.2.16 or later.\n\n \n \n 11.2.0 through 11.2.4-h*\n Upgrade to 11.2.4-h22 or 11.2.16 or later.\n \n PAN-OS 11.1\n\n 11.1.14 through 11.1.16-h*\n Upgrade to 11.1.16-h3 or later.\n \n \n 11.1.11 through 11.1.13-h*\n\n Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n \n \n 11.1.8 through 11.1.10-h*\n Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n \n \n 11.1.7 through 11.1.7-h*\n Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n \n \n 11.1.5 through 11.1.6-h*\n Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n \n \n 11.1.0 through 11.1.4-h*\n Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n \n PAN-OS 10.2\n\n 10.2.17 through 10.2.18-h*\n Upgrade to 10.2.18-h12 or later.\n \n \n 10.2.14 through 10.2.16-h*\n Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n \n \n 10.2.11 through 10.2.13-h*\n Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n \n \n 10.2.8 through 10.2.10-h*\n Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n \n \n 10.2.0 through 10.2.7-h*\n Upgrade to 10.2.7-h38 or 10.2.18-h12 or later.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability:\n\n\n\n\n\n * Route incoming traffic for the MGT port through a DP port https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba , e.g., enabling management profile on a DP interface for management access.\n\n * Replace the Certificate for Inbound Traffic Management https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c .\n * Decrypt inbound traffic to the management interface so the firewall can inspect it https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2 .\n * Enable threat prevention on the inbound traffic to management services.\n\n\n\n\nPlease note that this Threat ID requires SSL Decryption.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Very limited exploitation has been observed targeting the Palo Alto Networks management interface.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-94\",\"description\":\"CWE-94 Improper Control of Generation of Code ('Code Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"ATTACKED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NO\",\"Recovery\":\"USER\",\"valueDensity\":\"DIFFUSE\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"RED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.6,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourcePath": "/containers/cna/metrics/1/cvssV4_0", "text": "{\"attackVector\":\"ADJACENT\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"ATTACKED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NO\",\"Recovery\":\"USER\",\"valueDensity\":\"DIFFUSE\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"RED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.5,\"vectorString\":\"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "bounded", "truncatedFields": [ "/containers/cna/affected/1/cpes" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T03:57:17.169Z", "fetchedAt": "2026-10-23T02:43:40.568Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-14T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Cloud NGFW / PAN-OS / Prisma Accessにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:16.650Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7f262542e0c2726d853c7db4e8521a98b3971d3fccb649de5df4a36eab128c99", "sourceModifiedAt": "2026-10-15T03:57:17.169Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Palo Alto Networks の PAN-OS 管理インターフェースに認証された攻撃者がネットワーク経由でアクセスできると、ファイアウォール上で root 権限の任意コードを実行できるリモートコード実行脆弱性があります。", "risk": "認証された攻撃者がネットワークから管理インターフェースにアクセスできると、ファイアウォール上で root 権限の任意コードを実行できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "この脆弱性は PA‑Series、VM‑Series ファイアウォールおよび Panorama（仮想版と M‑Series）上の PAN‑OS ソフトウェアに適用されます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Cloud NGFW と Prisma® Access はこの脆弱性の影響を受けません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Palo Alto Networks / PAN-OS。影響ありとして記載：12.2.0以上、12.2.4未満。途中の変更：12.2.4から影響なし。影響ありとして記載：12.1.0以上、12.1.10-h2未満。途中の変更：12.1.4-h12から影響なし、12.1.7-h8から影響なし、12.1.10-h2から影響なし。影響ありとして記載：11.2.0以上、11.2.16未満。途中の変更：11.2.4-h22から影響なし、11.2.7-h21から影響なし、11.2.10-h15から影響なし、11.2.13-h3から影響なし、11.2.16から影響なし。影響ありとして記載：11.1.0以上、11.1.16-h3未満。途中の変更：11.1.4-h37から影響なし、11.1.6-h39から影響なし、11.1.7-h11から影響なし、11.1.10-h35から影響なし、11.1.13-h15から影響なし、11.1.16-h3から影響なし。影響ありとして記載：10.2.0以上、10.2.18-h12未満。途中の変更：10.2.7-h38から影響なし、10.2.10-h41から影響なし、10.2.13-h26から影響なし、10.2.16-h11から影響なし、10.2.18-h12から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Palo Alto Networks / Prisma Access。影響なしとして記載：All。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0322" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cloud NGFW / PAN-OS / Prisma Access」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-0322", "https://security.paloaltonetworks.com/CVE-2026-0322", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0322", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-0322" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "既知の回避策はありませんが、Threat Prevention サブスクリプションを利用して Threat ID 510046 と 510047（Applications and Threats コンテンツバージョン 9159‑10287 以降）を有効化すると限定的に保護できます。そのためには、MGT ポートへのトラフィックを DP ポート経由でルーティングし、管理プロファイルを DP インターフェースに設定し、インバウンド管理トラフィック用の証明書を置き換え、インバウンドトラフィックを復号してファイアウォールで検査し、脅威防御を有効化します。なお、この Threat ID を使用するには SSL 復号が必要です。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-0322", "https://security.paloaltonetworks.com/CVE-2026-0322", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0322", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-0322" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0322", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-0322", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2026-0322", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\n\n\n\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma® Access are not impacted by this vulnerability.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourceField": "/containers/cna/title", "excerpt": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Cloud NGFW\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"PAN-OS\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.2.0\",\"lessThan\":\"12.2.4\",\"changes\":[{\"at\":\"12.2.4\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"12.1.0\",\"lessThan\":\"12.1.10-h2\",\"changes\":[{\"at\":\"12.1.4-h12\",\"status\":\"unaffected\"},{\"at\":\"12.1.7-h8\",\"status\":\"unaffected\"},{\"at\":\"12.1.10-h2\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.16\",\"changes\":[{\"at\":\"11.2.4-h22\",\"status\":\"unaffected\"},{\"at\":\"11.2.7-h21\",\"status\":\"unaffected\"},{\"at\":\"11.2.10-h15\",\"status\":\"unaffected\"},{\"at\":\"11.2.13-h3\",\"status\":\"unaffected\"},{\"at\":\"11.2.16\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.1.0\",\"lessThan\":\"11.1.16-h3\",\"changes\":[{\"at\":\"11.1.4-h37\",\"status\":\"unaffected\"},{\"at\":\"11.1.6-h39\",\"status\":\"unaffected\"},{\"at\":\"11.1.7-h11\",\"status\":\"unaffected\"},{\"at\":\"11.1.10-h35\",\"status\":\"unaffected\"},{\"at\":\"11.1.13-h15\",\"status\":\"unaffected\"},{\"at\":\"11.1.16-h3\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.18-h12\",\"changes\":[{\"at\":\"10.2.7-h38\",\"status\":\"unaffected\"},{\"at\":\"10.2.10-h41\",\"status\":\"unaffected\"},{\"at\":\"10.2.13-h26\",\"status\":\"unaffected\"},{\"at\":\"10.2.16-h11\",\"status\":\"unaffected\"},{\"at\":\"10.2.18-h12\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\",\"cp", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Prisma Access\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0322.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability:\n\n\n\n\n\n * Route incoming traffic for the MGT port through a DP port https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba , e.g., enabling management profile on a DP interface for management access.\n\n * Replace the Certificate for Inbound Traffic Management https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c .\n * Decrypt inbound traffic to the management interface so the firewall can inspect it https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2 .\n * Enable threat prevention on the inbound traffic to management services.\n\n\n\n\nPlease note that this Threat ID requires SSL Decryption.", "language": "eng", "representation": "source_excerpt" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0322", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-0322\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-0322（Cloud NGFW / PAN-OS / Prisma Access）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・この脆弱性は PA‑Series、VM‑Series ファイアウォールおよび Panorama（仮想版と M‑Series）上の PAN‑OS ソフトウェアに適用されます。\n・Cloud NGFW と Prisma® Access はこの脆弱性の影響を受けません。\n・公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。\n・公式の対象表：Palo Alto Networks / PAN-OS。影響ありとして記載：12.2.0以上、12.2.4未満。途中の変更：12.2.4から影響なし。影響ありとして記載：12.1.0以上、12.1.10-h2未満。途中の変更：12.1.4-h12から影響なし、12.1.7-h8から影響なし、12.1.10-h2から影響なし。影響ありとして記載：11.2.0以上、11.2.16未満。途中の変更：11.2.4-h22から影響なし、11.2.7-h21から影響なし、11.2.10-h15から影響なし、11.2.13-h3から影響なし、11.2.16から影響なし。影響ありとして記載：11.1.0以上、11.1.16-h3未満。途中の変更：11.1.4-h37から影響なし、11.1.6-h39から影響なし、11.1.7-h11から影響なし、11.1.10-h35から影響なし、11.1.13-h15から影響なし、11.1.16-h3から影響なし。影響ありとして記載：10.2.0以上、10.2.18-h12未満。途中の変更：10.2.7-h38から影響なし、10.2.10-h41から影響なし、10.2.13-h26から影響なし、10.2.16-h11から影響なし、10.2.18-h12から影響なし。\n・公式の対象表：Palo Alto Networks / Prisma Access。影響なしとして記載：All。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-0322", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:16.650Z", "lastSuccess": "2026-10-23T03:21:16.650Z", "sourceCheckedAt": "2026-10-23T02:43:40.568Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-105133", "aliases": [], "title": "AhsayCBS：脆弱性情報", "summary": "AhsayCBS のバージョン 10.3.2 までに含まれる API コンポーネントのファイル com/ahsay/obs/api/ApiStructsAction.java の関数 checkSysPwd において、引数 random を操作すると認証が不適切になる脆弱性が検出されました。この脆弱性はリモートから攻撃を開始でき、現在エクスプロイトが公開されています。バージョン 10.3.4 にアップグレードすることで緩和できます。影響を受けるコンポーネントのアップグレードが推奨されます。", "risk": "認証が不適切になる可能性がある。", "product": "AhsayCBS", "category": "other", "component": "package", "severity": "medium", "cvss": 6.9, "cvssVersion": "4.0", "cvssSource": "VulDB", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "affected": [ { "product": "AhsayCBS", "range": "10.3.0（機能: API）" }, { "product": "AhsayCBS", "range": "10.3.1（機能: API）" }, { "product": "AhsayCBS", "range": "10.3.2（機能: API）" } ], "fixed": [], "steps": [ "バージョン 10.3.4 にアップグレードすることで緩和できる。", "「CVE-2026-105133」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "label": "CVE：VulDB" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-105133", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/vuln/413350", "label": "VDB-413350 | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication" }, { "url": "https://vuldb.com/vuln/413350/cti", "label": "VDB-413350 | CTI Indicators (IOB, IOC, IOA)" }, { "url": "https://vuldb.com/cve/CVE-2026-105133", "label": "CVE-2026-105133 | CVE Analysis and Report" }, { "url": "https://vuldb.com/submit/942688", "label": "Submit #942688 | Ahsay Systems Corporation Limited AhsayCBS 10.0.3 Authentication Bypass" }, { "url": "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "label": "CVE掲載の参考情報" }, { "url": "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105133", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-04T05:15:14.561Z", "modifiedAt": "2026-10-15T03:57:04.527Z", "fetchedAt": "2026-10-23T02:43:41.883Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.", "sourceTitle": "Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Ahsay", "product": "AhsayCBS", "versions": [ { "version": "10.3.0", "status": "affected" }, { "version": "10.3.1", "status": "affected" }, { "version": "10.3.2", "status": "affected" }, { "version": "10.3.4", "status": "unaffected" } ], "cpes": [ "cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*" ], "modules": [ "API" ] } ], "configurationNotes": "対象環境・機能: API。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-105133", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "fetchedAt": "2026-10-23T02:43:41.883Z", "publishedAt": "2026-10-04T05:15:14.561Z", "modifiedAt": "2026-10-15T03:57:04.527Z", "state": "published", "provider": "VulDB", "title": "Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication", "descriptions": [ { "lang": "en", "value": "A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Ahsay", "product": "AhsayCBS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [ "API" ], "programFiles": [], "cpes": [ "cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "10.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "10.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "10.3.4", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-287", "lang": "en", "description": "Improper Authentication", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseScore": 6.9, "baseSeverity": "MEDIUM", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseScore": 7.3, "baseSeverity": "HIGH", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" }, { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseScore": 7.3, "baseSeverity": "HIGH", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/2/cvssV3_0" }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C", "baseScore": 7.5, "baseSeverity": "", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/3/cvssV2_0" } ], "references": [ { "url": "https://vuldb.com/vuln/413350", "label": "VDB-413350 | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication", "tags": [ "vdb-entry", "technical-description" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/0" }, { "url": "https://vuldb.com/vuln/413350/cti", "label": "VDB-413350 | CTI Indicators (IOB, IOC, IOA)", "tags": [ "signature", "permissions-required" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/1" }, { "url": "https://vuldb.com/cve/CVE-2026-105133", "label": "CVE-2026-105133 | CVE Analysis and Report", "tags": [ "third-party-advisory" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/2" }, { "url": "https://vuldb.com/submit/942688", "label": "Submit #942688 | Ahsay Systems Corporation Limited AhsayCBS 10.0.3 Authentication Bypass", "tags": [ "third-party-advisory" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "label": "VulDB", "tags": [ "patch" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-105133", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Ahsay\",\"product\":\"AhsayCBS\",\"versions\":[{\"version\":\"10.3.0\",\"status\":\"affected\"},{\"version\":\"10.3.1\",\"status\":\"affected\"},{\"version\":\"10.3.2\",\"status\":\"affected\"},{\"version\":\"10.3.4\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*\"],\"modules\":[\"API\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"cweId\":\"CWE-287\",\"lang\":\"en\",\"description\":\"Improper Authentication\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"version\":\"4.0\",\"baseScore\":6.9,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P\",\"baseSeverity\":\"MEDIUM\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseScore\":7.3,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C\",\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/2/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourcePath": "/containers/cna/metrics/2/cvssV3_0", "text": "{\"version\":\"3.0\",\"baseScore\":7.3,\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C\",\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/3/cvssV2_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourcePath": "/containers/cna/metrics/3/cvssV2_0", "text": "{\"version\":\"2.0\",\"baseScore\":7.5,\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T03:57:04.527Z", "fetchedAt": "2026-10-23T02:43:41.883Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-14T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "AhsayCBSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:18.508Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0fec07b729f0549ac70b84eedd3de033835968cfe4eeba0d3f75ebbd180180cf", "sourceModifiedAt": "2026-10-15T03:57:04.527Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "AhsayCBS のバージョン 10.3.2 までに含まれる API コンポーネントのファイル com/ahsay/obs/api/ApiStructsAction.java の関数 checkSysPwd において、引数 random を操作すると認証が不適切になる脆弱性が検出されました。この脆弱性はリモートから攻撃を開始でき、現在エクスプロイトが公開されています。バージョン 10.3.4 にアップグレードすることで緩和できます。影響を受けるコンポーネントのアップグレードが推奨されます。", "risk": "認証が不適切になる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "AhsayCBS のバージョン 10.3.0、10.3.1、10.3.2 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "影響を受けるコンポーネントは API モジュールである。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "対象の関数は com/ahsay/obs/api/ApiStructsAction.java の checkSysPwd である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "引数 random を操作することで認証が不適切になる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃はリモートから開始可能である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "エクスプロイトは公開されている。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "CISA はこの脆弱性が実際に悪用されたことを確認している。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "公式の対象表：Ahsay / AhsayCBS。影響ありとして記載：10.3.0。影響ありとして記載：10.3.1。影響ありとして記載：10.3.2。影響なしとして記載：10.3.4。対象の機能：API", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E3" ] }, { "text": "「AhsayCBS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-105133", "https://vuldb.com/vuln/413350", "https://vuldb.com/vuln/413350/cti", "https://vuldb.com/cve/CVE-2026-105133", "https://vuldb.com/submit/942688", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105133" ] } ], "actions": [ { "text": "バージョン 10.3.4 にアップグレードすることで緩和できる。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2026-105133」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-105133", "https://vuldb.com/vuln/413350", "https://vuldb.com/vuln/413350/cti", "https://vuldb.com/cve/CVE-2026-105133", "https://vuldb.com/submit/942688", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105133" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-105133", "https://vuldb.com/vuln/413350", "https://vuldb.com/vuln/413350/cti", "https://vuldb.com/cve/CVE-2026-105133", "https://vuldb.com/submit/942688", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105133" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-105133", "https://vuldb.com/vuln/413350", "https://vuldb.com/vuln/413350/cti", "https://vuldb.com/cve/CVE-2026-105133", "https://vuldb.com/submit/942688", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105133" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-105133", "https://vuldb.com/vuln/413350", "https://vuldb.com/vuln/413350/cti", "https://vuldb.com/cve/CVE-2026-105133", "https://vuldb.com/submit/942688", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105133" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "label": "CVE：VulDB" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-105133", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/vuln/413350", "label": "VDB-413350 | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication" }, { "url": "https://vuldb.com/vuln/413350/cti", "label": "VDB-413350 | CTI Indicators (IOB, IOC, IOA)" }, { "url": "https://vuldb.com/cve/CVE-2026-105133", "label": "CVE-2026-105133 | CVE Analysis and Report" }, { "url": "https://vuldb.com/submit/942688", "label": "Submit #942688 | Ahsay Systems Corporation Limited AhsayCBS 10.0.3 Authentication Bypass" }, { "url": "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "label": "CVE掲載の参考情報" }, { "url": "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105133", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourceField": "/containers/cna/title", "excerpt": "Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105133.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Ahsay\",\"product\":\"AhsayCBS\",\"versions\":[{\"version\":\"10.3.0\",\"status\":\"affected\"},{\"version\":\"10.3.1\",\"status\":\"affected\"},{\"version\":\"10.3.2\",\"status\":\"affected\"},{\"version\":\"10.3.4\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*\"],\"modules\":[\"API\"]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-105133\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-105133（AhsayCBS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・AhsayCBS のバージョン 10.3.0、10.3.1、10.3.2 が影響を受ける。\n・影響を受けるコンポーネントは API モジュールである。\n・対象の関数は com/ahsay/obs/api/ApiStructsAction.java の checkSysPwd である。\n・引数 random を操作することで認証が不適切になる。\n・攻撃はリモートから開始可能である。\n・エクスプロイトは公開されている。\n・CISA はこの脆弱性が実際に悪用されたことを確認している。\n・公式の対象表：Ahsay / AhsayCBS。影響ありとして記載：10.3.0。影響ありとして記載：10.3.1。影響ありとして記載：10.3.2。影響なしとして記載：10.3.4。対象の機能：API\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-105133", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:18.508Z", "lastSuccess": "2026-10-23T03:21:18.508Z", "sourceCheckedAt": "2026-10-23T02:43:41.883Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-105134", "aliases": [], "title": "AhsayCBS：複製データの受信機能を悪用した不正な命令実行", "summary": "バックアップサーバーAhsayCBSの、複製データを受け取る機能（Replication Receiver）に問題があります。外部からの通信でサーバーに不正な命令を実行させる可能性があるため、対象の管理者は10.3.4への更新状況を確認してください。", "risk": "攻撃者が遠隔から、対象サーバー上で意図しないOSの命令を実行する可能性があります。", "product": "AhsayCBS", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "4.0", "cvssSource": "VulDB", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P", "affected": [ { "product": "AhsayCBS", "range": "10.3.0 / 10.3.1 / 10.3.2。説明は10.3.2までを対象と記載" } ], "fixed": [ "10.3.4" ], "steps": [ "公式CVEは10.3.4へ更新するとこの問題を解消できると明記しています。管理担当者にAhsayCBS 10.3.4、またはこの修正を含む正式版への更新を依頼してください。", "更新後は通常のバックアップと複製データの受信処理が動くことを確認し、適用した版と日時を記録してください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "label": "CVE公式：成立条件と10.3.4への更新" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-105134", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/vuln/413351", "label": "VDB-413351 | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection" }, { "url": "https://vuldb.com/vuln/413351/cti", "label": "VDB-413351 | CTI Indicators (IOB, IOC, TTP, IOA)" }, { "url": "https://vuldb.com/cve/CVE-2026-105134", "label": "CVE-2026-105134 | CVE Analysis and Report" }, { "url": "https://vuldb.com/submit/942743", "label": "Submit #942743 | Ahsay Systems Corporation Limited Ahsay CBS 10.3.0 Remote Code Execution via Arbitrary File Write" }, { "url": "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "label": "Ahsay開発元：10.3.4リリース情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105134", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-04T05:30:12.882Z", "modifiedAt": "2026-10-15T03:57:03.605Z", "fetchedAt": "2026-10-23T02:43:41.919Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 10.3.4 is able to resolve this issue. Upgrading the affected component is advised.", "sourceTitle": "Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection", "summaryMethod": "公式資料を照合した個別の日本語解説。一般的な操作手順は別に区別しています。", "state": "published", "affectedDetails": [ { "vendor": "Ahsay", "product": "AhsayCBS", "versions": [ { "version": "10.3.0", "status": "affected" }, { "version": "10.3.1", "status": "affected" }, { "version": "10.3.2", "status": "affected" }, { "version": "10.3.4", "status": "unaffected" } ], "cpes": [ "cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*" ], "modules": [ "Replication Receiver" ] } ], "configurationNotes": "対象環境・機能: Replication Receiver。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-105134", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "fetchedAt": "2026-10-23T02:43:41.919Z", "publishedAt": "2026-10-04T05:30:12.882Z", "modifiedAt": "2026-10-15T03:57:03.605Z", "state": "published", "provider": "VulDB", "title": "Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection", "descriptions": [ { "lang": "en", "value": "A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 10.3.4 is able to resolve this issue. Upgrading the affected component is advised.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Ahsay", "product": "AhsayCBS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [ "Replication Receiver" ], "programFiles": [], "cpes": [ "cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "10.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "10.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "10.3.4", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-78", "lang": "en", "description": "OS Command Injection", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-77", "lang": "en", "description": "Command Injection", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" }, { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/2/cvssV3_0" }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C", "baseScore": 10, "baseSeverity": "", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/3/cvssV2_0" } ], "references": [ { "url": "https://vuldb.com/vuln/413351", "label": "VDB-413351 | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection", "tags": [ "vdb-entry", "technical-description" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/0" }, { "url": "https://vuldb.com/vuln/413351/cti", "label": "VDB-413351 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": [ "signature", "permissions-required" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/1" }, { "url": "https://vuldb.com/cve/CVE-2026-105134", "label": "CVE-2026-105134 | CVE Analysis and Report", "tags": [ "third-party-advisory" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/2" }, { "url": "https://vuldb.com/submit/942743", "label": "Submit #942743 | Ahsay Systems Corporation Limited Ahsay CBS 10.3.0 Remote Code Execution via Arbitrary File Write", "tags": [ "third-party-advisory" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "label": "VulDB", "tags": [ "patch" ], "provider": "VulDB", "sourcePath": "/containers/cna/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-105134", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Ahsay\",\"product\":\"AhsayCBS\",\"versions\":[{\"version\":\"10.3.0\",\"status\":\"affected\"},{\"version\":\"10.3.1\",\"status\":\"affected\"},{\"version\":\"10.3.2\",\"status\":\"affected\"},{\"version\":\"10.3.4\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*\"],\"modules\":[\"Replication Receiver\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 10.3.4 is able to resolve this issue. Upgrading the affected component is advised.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"cweId\":\"CWE-78\",\"lang\":\"en\",\"description\":\"OS Command Injection\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"type\":\"CWE\",\"cweId\":\"CWE-77\",\"lang\":\"en\",\"description\":\"Command Injection\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"version\":\"4.0\",\"baseScore\":10,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P\",\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseScore\":10,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C\",\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/2/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/metrics/2/cvssV3_0", "text": "{\"version\":\"3.0\",\"baseScore\":10,\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C\",\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/3/cvssV2_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourcePath": "/containers/cna/metrics/3/cvssV2_0", "text": "{\"version\":\"2.0\",\"baseScore\":10,\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T03:57:03.605Z", "fetchedAt": "2026-10-23T02:43:41.919Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-14T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "AhsayCBSにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "reviewed", "reviewedAt": "2026-10-23T03:34:23.000Z", "reviewState": "current", "summary": "バックアップサーバーAhsayCBSの、複製データを受け取る機能（Replication Receiver）に問題があります。外部からの通信でサーバーに不正な命令を実行させる可能性があるため、対象の管理者は10.3.4への更新状況を確認してください。", "risk": "攻撃者が遠隔から、対象サーバー上で意図しないOSの命令を実行する可能性があります。", "applicability": [ { "text": "公式対象表はAhsayCBS 10.3.0・10.3.1・10.3.2を挙げています。説明文は10.3.2までを対象としているため、それ以前の版の利用者も、一覧にないだけで対象外と判断しないでください。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "問題があるのはReplication ReceiverのUpdateReceivers.do処理です。バックアップ担当者に、この製品・版と受信機能の利用状況を確認してもらってください。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json" ], "evidenceIds": [ "E1" ] }, { "text": "最初に「AhsayCBS」を使っているか、開発元・製品名・バージョンを確認します。同じカテゴリの製品を使っているだけでは、この問題の対象とは限りません。", "kind": "check", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-105134", "https://vuldb.com/vuln/413351", "https://vuldb.com/vuln/413351/cti", "https://vuldb.com/cve/CVE-2026-105134", "https://vuldb.com/submit/942743", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105134" ] } ], "versionChecks": [ { "text": "「AhsayCBS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-105134", "https://vuldb.com/vuln/413351", "https://vuldb.com/vuln/413351/cti", "https://vuldb.com/cve/CVE-2026-105134", "https://vuldb.com/submit/942743", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105134" ] } ], "actions": [ { "text": "公式CVEは10.3.4へ更新するとこの問題を解消できると明記しています。管理担当者にAhsayCBS 10.3.4、またはこの修正を含む正式版への更新を依頼してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json" ], "evidenceIds": [ "E1" ] }, { "text": "更新後は通常のバックアップと複製データの受信処理が動くことを確認し、適用した版と日時を記録してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-105134", "https://vuldb.com/vuln/413351", "https://vuldb.com/vuln/413351/cti", "https://vuldb.com/cve/CVE-2026-105134", "https://vuldb.com/submit/942743", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105134" ] } ], "temporaryMitigations": [], "verification": [ { "text": "更新後に製品情報の画面で版・ビルド番号を記録し、このCVEの修正が含まれることを提供元の説明と照合します。普段の主要な操作も確認し、担当者から適用日時と結果を受け取ってください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-105134", "https://vuldb.com/vuln/413351", "https://vuldb.com/vuln/413351/cti", "https://vuldb.com/cve/CVE-2026-105134", "https://vuldb.com/submit/942743", "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134", "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-105134" ] } ], "unknowns": [ "利用中の環境を検査した結果ではありません。製品名・版・利用条件と、実際に修正が適用されているかを確認してください。" ], "supportRequest": "件名：CVE-2026-105134（AhsayCBS）の影響と対応状況の確認\n\n利用中のサイト・機器・サービス：[記入してください]\n製品名・開発元：[記入してください]\n現在のバージョン・ビルド番号：[不明なら「不明」と記入]\n\nCVE-2026-105134について、次を教えてください。\n1. この環境は対象ですか。対象外の場合は、版・設定・機能などの判断理由を教えてください。\n2. 対象の場合、修正を含む版・パッケージ番号と、更新方法を教えてください。古い版に修正を取り込んでいる場合は、このCVEへの対応状況を教えてください。\n3. いつ対応できますか。再起動・停止時間・事前のバックアップや確認作業は必要ですか。\n4. すぐ更新できない場合、正式な回避策とその限界・副作用を教えてください。利用を続けてよい条件も知りたいです。\n5. 対応完了後、修正を確認できる版・設定・対応日時を連絡してください。\n\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-105134", "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "label": "CVE公式：成立条件と10.3.4への更新" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-105134", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/vuln/413351", "label": "VDB-413351 | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection" }, { "url": "https://vuldb.com/vuln/413351/cti", "label": "VDB-413351 | CTI Indicators (IOB, IOC, TTP, IOA)" }, { "url": "https://vuldb.com/cve/CVE-2026-105134", "label": "CVE-2026-105134 | CVE Analysis and Report" }, { "url": "https://vuldb.com/submit/942743", "label": "Submit #942743 | Ahsay Systems Corporation Limited Ahsay CBS 10.3.0 Remote Code Execution via Arbitrary File Write" }, { "url": "https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4", "label": "Ahsay開発元：10.3.4リリース情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105134", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "reviewedSourceFingerprint": "reviewed-source-v1:b8e3787835daec068fc8bf2b07e41f62bd18e2e119292ad6fdb400907b1e624d", "reviewedSourceScope": "official_evidence", "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 10.3.4 is able to resolve this issue. Upgrading the affected component is advised.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105134.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Ahsay\",\"product\":\"AhsayCBS\",\"versions\":[{\"version\":\"10.3.0\",\"status\":\"affected\"},{\"version\":\"10.3.1\",\"status\":\"affected\"},{\"version\":\"10.3.2\",\"status\":\"affected\"},{\"version\":\"10.3.4\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:2.3:a:ahsay:ahsaycbs:*:*:*:*:*:*:*:*\"],\"modules\":[\"Replication Receiver\"]}", "language": null, "representation": "source_json" } ], "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "glossary": [] } }, { "id": "CVE-2026-76519", "aliases": [], "title": "Cisco Secure Email：ファイルの不正な書き換え", "summary": "Cisco Secure Email Gateway の Advanced Malware Protection (AMP) 機能において、ファイル評価サービスが有効な状態でメール添付ファイルを処理する際の不適切な取り扱いにより、認証されていないリモート攻撃者が任意のファイルを書き込み、OS 上で root 権限のコマンドを実行できる脆弱性が存在します。", "risk": "攻撃者が任意のファイルを書き込み、root 権限でコマンドを実行できるため、システム全体が制御下に置かれる可能性があります。", "product": "Cisco Secure Email", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Cisco Secure Email", "range": "14.0.0-698" }, { "product": "Cisco Secure Email", "range": "13.5.1-277" }, { "product": "Cisco Secure Email", "range": "13.0.0-392" }, { "product": "Cisco Secure Email", "range": "14.2.0-620" }, { "product": "Cisco Secure Email", "range": "13.0.5-007" }, { "product": "Cisco Secure Email", "range": "13.5.4-038" }, { "product": "Cisco Secure Email", "range": "14.2.1-020" }, { "product": "Cisco Secure Email", "range": "14.3.0-032" }, { "product": "Cisco Secure Email", "range": "15.0.0-104" }, { "product": "Cisco Secure Email", "range": "15.0.1-030" }, { "product": "Cisco Secure Email", "range": "15.5.0-048" }, { "product": "Cisco Secure Email", "range": "15.5.1-055" }, { "product": "Cisco Secure Email", "range": "15.5.2-018" }, { "product": "Cisco Secure Email", "range": "16.0.0-050" }, { "product": "Cisco Secure Email", "range": "15.0.3-002" }, { "product": "Cisco Secure Email", "range": "16.0.0-054" }, { "product": "Cisco Secure Email", "range": "15.5.3-022" }, { "product": "Cisco Secure Email", "range": "16.0.1-017" }, { "product": "Cisco Secure Email", "range": "15.5.4-012" }, { "product": "Cisco Secure Email", "range": "16.0.4-016" }, { "product": "Cisco Secure Email", "range": "15.0.5-016" }, { "product": "Cisco Secure Email", "range": "16.0.2-112" }, { "product": "Cisco Secure Email", "range": "16.0.3-044" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-76519", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76519", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-14T16:07:51.466Z", "modifiedAt": "2026-10-15T03:56:57.762Z", "fetchedAt": "2026-10-23T02:43:50.910Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.\r\n\r\nThis vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.", "sourceTitle": "Cisco Secure Email Gateway Arbitrary File Write Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Secure Email", "versions": [ { "version": "14.0.0-698", "status": "affected" }, { "version": "13.5.1-277", "status": "affected" }, { "version": "13.0.0-392", "status": "affected" }, { "version": "14.2.0-620", "status": "affected" }, { "version": "13.0.5-007", "status": "affected" }, { "version": "13.5.4-038", "status": "affected" }, { "version": "14.2.1-020", "status": "affected" }, { "version": "14.3.0-032", "status": "affected" }, { "version": "15.0.0-104", "status": "affected" }, { "version": "15.0.1-030", "status": "affected" }, { "version": "15.5.0-048", "status": "affected" }, { "version": "15.5.1-055", "status": "affected" }, { "version": "15.5.2-018", "status": "affected" }, { "version": "16.0.0-050", "status": "affected" }, { "version": "15.0.3-002", "status": "affected" }, { "version": "16.0.0-054", "status": "affected" }, { "version": "15.5.3-022", "status": "affected" }, { "version": "16.0.1-017", "status": "affected" }, { "version": "15.5.4-012", "status": "affected" }, { "version": "16.0.4-016", "status": "affected" }, { "version": "15.0.5-016", "status": "affected" }, { "version": "16.0.2-112", "status": "affected" }, { "version": "16.0.3-044", "status": "affected" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-76519", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "fetchedAt": "2026-10-23T02:43:50.910Z", "publishedAt": "2026-10-14T16:07:51.466Z", "modifiedAt": "2026-10-15T03:56:57.762Z", "state": "published", "provider": "cisco", "title": "Cisco Secure Email Gateway Arbitrary File Write Vulnerability", "descriptions": [ { "lang": "en", "value": "A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.\r\n\r\nThis vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Secure Email", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "14.0.0-698", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "13.5.1-277", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "13.0.0-392", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "14.2.0-620", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "13.0.5-007", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "13.5.4-038", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "14.2.1-020", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "14.3.0-032", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "15.0.0-104", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "15.0.1-030", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "15.5.0-048", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "15.5.1-055", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "15.5.2-018", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "16.0.0-050", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "15.0.3-002", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "16.0.0-054", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "15.5.3-022", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "16.0.1-017", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "15.5.4-012", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "16.0.4-016", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "15.0.5-016", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "16.0.2-112", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "16.0.3-044", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-23", "lang": "en", "description": "Relative Path Traversal", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp", "label": "cisco-sa-esa-afw-zqYJkjxp", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76519", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Email\",\"versions\":[{\"version\":\"14.0.0-698\",\"status\":\"affected\"},{\"version\":\"13.5.1-277\",\"status\":\"affected\"},{\"version\":\"13.0.0-392\",\"status\":\"affected\"},{\"version\":\"14.2.0-620\",\"status\":\"affected\"},{\"version\":\"13.0.5-007\",\"status\":\"affected\"},{\"version\":\"13.5.4-038\",\"status\":\"affected\"},{\"version\":\"14.2.1-020\",\"status\":\"affected\"},{\"version\":\"14.3.0-032\",\"status\":\"affected\"},{\"version\":\"15.0.0-104\",\"status\":\"affected\"},{\"version\":\"15.0.1-030\",\"status\":\"affected\"},{\"version\":\"15.5.0-048\",\"status\":\"affected\"},{\"version\":\"15.5.1-055\",\"status\":\"affected\"},{\"version\":\"15.5.2-018\",\"status\":\"affected\"},{\"version\":\"16.0.0-050\",\"status\":\"affected\"},{\"version\":\"15.0.3-002\",\"status\":\"affected\"},{\"version\":\"16.0.0-054\",\"status\":\"affected\"},{\"version\":\"15.5.3-022\",\"status\":\"affected\"},{\"version\":\"16.0.1-017\",\"status\":\"affected\"},{\"version\":\"15.5.4-012\",\"status\":\"affected\"},{\"version\":\"16.0.4-016\",\"status\":\"affected\"},{\"version\":\"15.0.5-016\",\"status\":\"affected\"},{\"version\":\"16.0.2-112\",\"status\":\"affected\"},{\"version\":\"16.0.3-044\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.\r\n\r\nThis vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Relative Path Traversal\",\"type\":\"cwe\",\"cweId\":\"CWE-23\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T03:56:57.762Z", "fetchedAt": "2026-10-23T02:43:50.910Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-14T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Cisco Secure Emailにファイルの不正な書き換えに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "意図しない場所にファイルを書き込まれる可能性があります。必要な権限や書き込み先などの成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:19.537Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c530ea64bcea19747519ae4204f9079f8e49940cc50d3b5f5b28d5ac277cbffd", "sourceModifiedAt": "2026-10-15T03:56:57.762Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Secure Email Gateway の Advanced Malware Protection (AMP) 機能において、ファイル評価サービスが有効な状態でメール添付ファイルを処理する際の不適切な取り扱いにより、認証されていないリモート攻撃者が任意のファイルを書き込み、OS 上で root 権限のコマンドを実行できる脆弱性が存在します。", "risk": "攻撃者が任意のファイルを書き込み、root 権限でコマンドを実行できるため、システム全体が制御下に置かれる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "この脆弱性は、Cisco Secure Email Gateway の Advanced Malware Protection (AMP) 機能が有効で、かつファイル評価サービスが有効化されている場合に発生します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるバージョンは、14.0.0-698、13.5.1-277、13.0.0-392、14.2.0-620、13.0.5-007、13.5.4-038、14.2.1-020、14.3.0-032、15.0.0-104、15.0.1-030、15.5.0-048、15.5.1-055、15.5.2-018、16.0.0-050、15.0.3-002、16.0.0-054、15.5.3-022、16.0.1-017、15.5.4-012、16.0.4-016、15.0.5-016、16.0.2-112、16.0.3-044 のすべてです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Secure Email。影響ありとして記載：14.0.0-698。影響ありとして記載：13.5.1-277。影響ありとして記載：13.0.0-392。影響ありとして記載：14.2.0-620。影響ありとして記載：13.0.5-007。影響ありとして記載：13.5.4-038。影響ありとして記載：14.2.1-020。影響ありとして記載：14.3.0-032。影響ありとして記載：15.0.0-104。影響ありとして記載：15.0.1-030。影響ありとして記載：15.5.0-048。影響ありとして記載：15.5.1-055。影響ありとして記載：15.5.2-018。影響ありとして記載：16.0.0-050。影響ありとして記載：15.0.3-002。影響ありとして記載：16.0.0-054。影響ありとして記載：15.5.3-022。影響ありとして記載：16.0.1-017。影響ありとして記載：15.5.4-012。影響ありとして記載：16.0.4-016。影響ありとして記載：15.0.5-016。影響ありとして記載：16.0.2-112。影響ありとして記載：16.0.3-044。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cisco Secure Email」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-76519", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-76519" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-76519", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-76519" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-76519", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-76519" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-76519", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76519", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.\r\n\r\nThis vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourceField": "/containers/cna/title", "excerpt": "Cisco Secure Email Gateway Arbitrary File Write Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76519.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Email\",\"versions\":[{\"version\":\"14.0.0-698\",\"status\":\"affected\"},{\"version\":\"13.5.1-277\",\"status\":\"affected\"},{\"version\":\"13.0.0-392\",\"status\":\"affected\"},{\"version\":\"14.2.0-620\",\"status\":\"affected\"},{\"version\":\"13.0.5-007\",\"status\":\"affected\"},{\"version\":\"13.5.4-038\",\"status\":\"affected\"},{\"version\":\"14.2.1-020\",\"status\":\"affected\"},{\"version\":\"14.3.0-032\",\"status\":\"affected\"},{\"version\":\"15.0.0-104\",\"status\":\"affected\"},{\"version\":\"15.0.1-030\",\"status\":\"affected\"},{\"version\":\"15.5.0-048\",\"status\":\"affected\"},{\"version\":\"15.5.1-055\",\"status\":\"affected\"},{\"version\":\"15.5.2-018\",\"status\":\"affected\"},{\"version\":\"16.0.0-050\",\"status\":\"affected\"},{\"version\":\"15.0.3-002\",\"status\":\"affected\"},{\"version\":\"16.0.0-054\",\"status\":\"affected\"},{\"version\":\"15.5.3-022\",\"status\":\"affected\"},{\"version\":\"16.0.1-017\",\"status\":\"affected\"},{\"version\":\"15.5.4-012\",\"status\":\"affected\"},{\"version\":\"16.0.4-016\",\"status\":\"affected\"},{\"version\":\"15.0.5-016\",\"status\":\"affected\"},{\"version\":\"16.0.2-112\",\"status\":\"affected\"},{\"version\":\"16.0.3-044\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-76519\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-76519（Cisco Secure Email）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・この脆弱性は、Cisco Secure Email Gateway の Advanced Malware Protection (AMP) 機能が有効で、かつファイル評価サービスが有効化されている場合に発生します。\n・影響を受けるバージョンは、14.0.0-698、13.5.1-277、13.0.0-392、14.2.0-620、13.0.5-007、13.5.4-038、14.2.1-020、14.3.0-032、15.0.0-104、15.0.1-030、15.5.0-048、15.5.1-055、15.5.2-018、16.0.0-050、15.0.3-002、16.0.0-054、15.5.3-022、16.0.1-017、15.5.4-012、16.0.4-016、15.0.5-016、16.0.2-112、16.0.3-044 のすべてです。\n・公式の対象表：Cisco / Cisco Secure Email。影響ありとして記載：14.0.0-698。影響ありとして記載：13.5.1-277。影響ありとして記載：13.0.0-392。影響ありとして記載：14.2.0-620。影響ありとして記載：13.0.5-007。影響ありとして記載：13.5.4-038。影響ありとして記載：14.2.1-020。影響ありとして記載：14.3.0-032。影響ありとして記載：15.0.0-104。影響ありとして記載：15.0.1-030。影響ありとして記載：15.5.0-048。影響ありとして記載：15.5.1-055。影響ありとして記載：15.5.2-018。影響ありとして記載：16.0.0-050。影響ありとして記載：15.0.3-002。影響ありとして記載：16.0.0-054。影響ありとして記載：15.5.3-022。影響ありとして記載：16.0.1-017。影響ありとして記載：15.5.4-012。影響ありとして記載：16.0.4-016。影響ありとして記載：15.0.5-016。影響ありとして記載：16.0.2-112。影響ありとして記載：16.0.3-044。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-76519", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:19.537Z", "lastSuccess": "2026-10-23T03:21:19.537Z", "sourceCheckedAt": "2026-10-23T02:43:50.910Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-104935", "aliases": [], "title": "Connect Secure：コード実行", "summary": "ICS のバージョン 25.1.3.0 未満で、認証を偽装することでリモートの認証されていない攻撃者が任意のコマンドを実行できる認証バイパスが存在します。この脆弱性は ICS バージョン 22.7R2.14 以前には影響しません。", "risk": "リモートの認証されていない攻撃者がサーバーや機器に攻撃者の命令を実行させられる可能性があります。", "product": "Connect Secure", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "ivanti", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "affected": [ { "product": "Connect Secure", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104935", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-104935", "label": "CVE公式レコード" }, { "url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104935", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-13T15:31:07.757Z", "modifiedAt": "2026-10-13T19:58:23.946Z", "fetchedAt": "2026-10-23T02:43:41.843Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Ivanti", "product": "Connect Secure", "versions": [ { "status": "unaffected", "version": "25.1.3.0", "versionType": "custom" }, { "status": "unaffected", "version": "25.1.3.1", "versionType": "custom" }, { "status": "unaffected", "version": "22.8R2.5", "versionType": "custom" }, { "status": "unaffected", "version": "22.7R2.14", "versionType": "custom" } ], "defaultStatus": "affected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-104935", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "fetchedAt": "2026-10-23T02:43:41.843Z", "publishedAt": "2026-10-13T15:31:07.757Z", "modifiedAt": "2026-10-13T19:58:23.946Z", "state": "published", "provider": "ivanti", "title": "", "descriptions": [ { "lang": "en", "value": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Ivanti", "product": "Connect Secure", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "25.1.3.0", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "25.1.3.1", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "22.8R2.5", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "22.7R2.14", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-290", "lang": "en", "description": "CWE-290 Authentication bypass by spoofing", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "ivanti", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935", "label": "ivanti", "tags": [], "provider": "ivanti", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104935", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Ivanti\",\"product\":\"Connect Secure\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"25.1.3.0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"25.1.3.1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"22.8R2.5\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"22.7R2.14\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-290\",\"description\":\"CWE-290 Authentication bypass by spoofing\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.6,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-13T19:58:23.946Z", "fetchedAt": "2026-10-23T02:43:41.843Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Connect Secureにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:20.591Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7ff0fe7c59d252aaf164b170fe2f491f422b7ac30f3a71d502dcd8322ba6a768", "sourceModifiedAt": "2026-10-13T19:58:23.946Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ICS のバージョン 25.1.3.0 未満で、認証を偽装することでリモートの認証されていない攻撃者が任意のコマンドを実行できる認証バイパスが存在します。この脆弱性は ICS バージョン 22.7R2.14 以前には影響しません。", "risk": "リモートの認証されていない攻撃者がサーバーや機器に攻撃者の命令を実行させられる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "バージョン 25.1.3.0、25.1.3.1、22.8R2.5、22.7R2.14 は影響しません。これらを除くすべてのバージョンは影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Ivanti / Connect Secure。影響なしとして記載：25.1.3.0。影響なしとして記載：25.1.3.1。影響なしとして記載：22.8R2.5。影響なしとして記載：22.7R2.14。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104935" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Connect Secure」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-104935", "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104935", "https://nvd.nist.gov/vuln/detail/CVE-2026-104935" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-104935", "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104935", "https://nvd.nist.gov/vuln/detail/CVE-2026-104935" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-104935", "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104935", "https://nvd.nist.gov/vuln/detail/CVE-2026-104935" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104935", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-104935", "label": "CVE公式レコード" }, { "url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104935", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104935.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Ivanti\",\"product\":\"Connect Secure\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"25.1.3.0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"25.1.3.1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"22.8R2.5\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"22.7R2.14\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104935", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-104935\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-104935（Connect Secure）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・バージョン 25.1.3.0、25.1.3.1、22.8R2.5、22.7R2.14 は影響しません。これらを除くすべてのバージョンは影響があります。\n・公式の対象表：Ivanti / Connect Secure。影響なしとして記載：25.1.3.0。影響なしとして記載：25.1.3.1。影響なしとして記載：22.8R2.5。影響なしとして記載：22.7R2.14。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-104935", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:20.591Z", "lastSuccess": "2026-10-23T03:21:20.591Z", "sourceCheckedAt": "2026-10-23T02:43:41.843Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-96951", "aliases": [], "title": "Outlook.com / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Wi：脆弱性情報", "summary": "Windows Shell において、コマンドで使用される特殊文字が適切に無効化されていない（コマンドインジェクション）ため、ネットワーク越しに認可されていない攻撃者がセキュリティ機能を回避できる。", "risk": "攻撃者がセキュリティ機能を回避できる可能性がある。", "product": "Outlook.com / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Wi", "category": "windows", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "Outlook.com", "range": ">= 1.0.0 / < 20260925.100" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.9612（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.9376（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19044.0 / < 10.0.19044.7807（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.7807（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.7652（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.7652（環境: x64-based Systems）" }, { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.9711（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 Version 25H2", "range": ">= 10.0.26200.0 / < 10.0.26200.9711（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 26H1", "range": ">= 10.0.28000.0 / < 10.0.28000.3231（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 Version 26H2", "range": ">= 10.0.26300.0 / < 10.0.26300.9711（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.23470（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.23470（環境: x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.9612（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.9612（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.9376（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.9376（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.5761（環境: x64-based Systems）" }, { "product": "Windows Server 2025", "range": ">= 10.0.26100.0 / < 10.0.26100.33650（環境: x64-based Systems）" }, { "product": "Windows Server 2025 (Server Core installation)", "range": ">= 10.0.26100.0 / < 10.0.26100.33650（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96951", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-96951", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951", "label": "Windows Shell Security Feature Bypass Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-96951", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96951", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2026-10-13T19:01:26.801Z", "modifiedAt": "2026-10-22T22:25:17.357Z", "fetchedAt": "2026-10-23T02:43:53.704Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Shell Security Feature Bypass Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Outlook.com", "versions": [ { "version": "1.0.0", "lessThan": "20260925.100", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9612", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19044.0", "lessThan": "10.0.19044.7807", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.7807", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.7652", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.7652", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.9711", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26200.0", "lessThan": "10.0.26200.9711", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.28000.0", "lessThan": "10.0.28000.3231", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 26H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26300.0", "lessThan": "10.0.26300.9711", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.23470", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.23470", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9612", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9612", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.5761", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.33650", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.33650", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-96951", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "fetchedAt": "2026-10-23T02:43:53.704Z", "publishedAt": "2026-10-13T19:01:26.801Z", "modifiedAt": "2026-10-22T22:25:17.357Z", "state": "published", "provider": "microsoft", "title": "Windows Shell Security Feature Bypass Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Outlook.com", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "1.0.0", "lessThan": "20260925.100", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9612", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.19044.0", "lessThan": "10.0.19044.7807", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.7807", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.7652", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.7652", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.9711", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.26200.0", "lessThan": "10.0.26200.9711", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "sourcePath": "/containers/cna/affected/9", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.28000.0", "lessThan": "10.0.28000.3231", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 26H2", "sourcePath": "/containers/cna/affected/10", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.26300.0", "lessThan": "10.0.26300.9711", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.23470", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.23470", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9612", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9612", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.5761", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.33650", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.33650", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en-US", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951", "label": "Windows Shell Security Feature Bypass Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96951", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Outlook.com\",\"versions\":[{\"version\":\"1.0.0\",\"lessThan\":\"20260925.100\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9612\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7807\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7807\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7652\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7652\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.9711\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.9711\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.3231\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 26H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26300.0\",\"lessThan\":\"10.0.26300.9711\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23470\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23470\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9612\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9612\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5761\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33650\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33650\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-77\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-22T22:25:17.357Z", "fetchedAt": "2026-10-23T02:43:53.704Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Outlook.com / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Wiに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:21.154Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "1c84d3a4a63e862bf1c4a8fa696c7a70c89aa478f3ce02966f3e79a4868dc24d", "sourceModifiedAt": "2026-10-22T22:25:17.357Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows Shell において、コマンドで使用される特殊文字が適切に無効化されていない（コマンドインジェクション）ため、ネットワーク越しに認可されていない攻撃者がセキュリティ機能を回避できる。", "risk": "攻撃者がセキュリティ機能を回避できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Outlook.com のバージョン 1.0.0 から 20260925.100 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Windows 10 Version 1607（32 ビットおよび x64） のバージョン 10.0.14393.0 から 10.0.14393.9612 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Windows 10 Version 1809（32 ビットおよび x64） のバージョン 10.0.17763.0 から 10.0.17763.9376 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "Windows 10 Version 21H2（32 ビット、ARM64、x64） のバージョン 10.0.19044.0 から 10.0.19044.7807 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E6", "E2" ] }, { "text": "Windows 10 Version 22H2（32 ビット、ARM64、x64） のバージョン 10.0.19045.0 から 10.0.19045.7807 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E7", "E2" ] }, { "text": "Windows 11 version 23H2（ARM64） のバージョン 10.0.22631.0 から 10.0.22631.7652 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E8", "E2" ] }, { "text": "Windows 11 Version 23H2（x64） のバージョン 10.0.22631.0 から 10.0.22631.7652 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E9", "E2" ] }, { "text": "Windows 11 Version 24H2（ARM64、x64） のバージョン 10.0.26100.0 から 10.0.26100.9711 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E10", "E2" ] }, { "text": "Windows 11 Version 25H2（ARM64、x64） のバージョン 10.0.26200.0 から 10.0.26200.9711 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E11", "E2" ] }, { "text": "Windows 11 version 26H1（ARM64、x64） のバージョン 10.0.28000.0 から 10.0.28000.3231 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E12", "E2" ] }, { "text": "Windows 11 Version 26H2（ARM64、x64） のバージョン 10.0.26300.0 から 10.0.26300.9711 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E13", "E2" ] }, { "text": "Windows Server 2012 R2（x64） のバージョン 6.3.9600.0 から 6.3.9600.23470 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E14", "E2" ] }, { "text": "Windows Server 2012 R2 (Server Core)（x64） のバージョン 6.3.9600.0 から 6.3.9600.23470 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E15", "E2" ] }, { "text": "Windows Server 2016（x64） のバージョン 10.0.14393.0 から 10.0.14393.9612 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E16", "E2" ] }, { "text": "Windows Server 2016 (Server Core)（x64） のバージョン 10.0.14393.0 から 10.0.14393.9612 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E17", "E2" ] }, { "text": "Windows Server 2019（x64） のバージョン 10.0.17763.0 から 10.0.17763.9376 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E18", "E2" ] }, { "text": "Windows Server 2019 (Server Core)（x64） のバージョン 10.0.17763.0 から 10.0.17763.9376 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E19", "E2" ] }, { "text": "Windows Server 2022（x64） のバージョン 10.0.20348.0 から 10.0.20348.5761 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E20", "E2" ] }, { "text": "Windows Server 2025（x64） のバージョン 10.0.26100.0 から 10.0.26100.33650 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E21", "E2" ] }, { "text": "Windows Server 2025 (Server Core)（x64） のバージョン 10.0.26100.0 から 10.0.26100.33650 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E22", "E2" ] }, { "text": "公式の対象表：Microsoft / Outlook.com。影響ありとして記載：1.0.0以上、20260925.100未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9612未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.9376未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7807未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7807未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7652未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7652未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.9711未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.9711未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.3231未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 26H2。影響ありとして記載：10.0.26300.0以上、10.0.26300.9711未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.23470未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.23470未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9612未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9612未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.9376未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.9376未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5761未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.33650未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.33650未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E22" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96951" ], "evidenceIds": [ "E23" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2026-96951", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96951", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-96951", "https://nvd.nist.gov/vuln/detail/CVE-2026-96951" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96951", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-96951", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951", "label": "Windows Shell Security Feature Bypass Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-96951", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96951", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Shell Security Feature Bypass Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Outlook.com\",\"versions\":[{\"version\":\"1.0.0\",\"lessThan\":\"20260925.100\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9612\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7807\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7807\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7652\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7652\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.9711\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.9711\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.3231\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 26H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26300.0\",\"lessThan\":\"10.0.26300.9711\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23470\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23470\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9612\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9612\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5761\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33650\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96951.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33650\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96951", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-96951\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-96951（Outlook.com / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Wi）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Outlook.com のバージョン 1.0.0 から 20260925.100 未満が影響を受ける。\n・Windows 10 Version 1607（32 ビットおよび x64） のバージョン 10.0.14393.0 から 10.0.14393.9612 未満が影響を受ける。\n・Windows 10 Version 1809（32 ビットおよび x64） のバージョン 10.0.17763.0 から 10.0.17763.9376 未満が影響を受ける。\n・Windows 10 Version 21H2（32 ビット、ARM64、x64） のバージョン 10.0.19044.0 から 10.0.19044.7807 未満が影響を受ける。\n・Windows 10 Version 22H2（32 ビット、ARM64、x64） のバージョン 10.0.19045.0 から 10.0.19045.7807 未満が影響を受ける。\n・Windows 11 version 23H2（ARM64） のバージョン 10.0.22631.0 から 10.0.22631.7652 未満が影響を受ける。\n・Windows 11 Version 23H2（x64） のバージョン 10.0.22631.0 から 10.0.22631.7652 未満が影響を受ける。\n・Windows 11 Version 24H2（ARM64、x64） のバージョン 10.0.26100.0 から 10.0.26100.9711 未満が影響を受ける。\n・Windows 11 Version 25H2（ARM64、x64） のバージョン 10.0.26200.0 から 10.0.26200.9711 未満が影響を受ける。\n・Windows 11 version 26H1（ARM64、x64） のバージョン 10.0.28000.0 から 10.0.28000.3231 未満が影響を受ける。\n・Windows 11 Version 26H2（ARM64、x64） のバージョン 10.0.26300.0 から 10.0.26300.9711 未満が影響を受ける。\n・Windows Server 2012 R2（x64） のバージョン 6.3.9600.0 から 6.3.9600.23470 未満が影響を受ける。\n・Windows Server 2012 R2 (Server Core)（x64） のバージョン 6.3.9600.0 から 6.3.9600.23470 未満が影響を受ける。\n・Windows Server 2016（x64） のバージョン 10.0.14393.0 から 10.0.14393.9612 未満が影響を受ける。\n・Windows Server 2016 (Server Core)（x64） のバージョン 10.0.14393.0 から 10.0.14393.9612 未満が影響を受ける。\n・Windows Server 2019（x64） のバージョン 10.0.17763.0 から 10.0.17763.9376 未満が影響を受ける。\n・Windows Server 2019 (Server Core)（x64） のバージョン 10.0.17763.0 から 10.0.17763.9376 未満が影響を受ける。\n・Windows Server 2022（x64） のバージョン 10.0.20348.0 から 10.0.20348.5761 未満が影響を受ける。\n・Windows Server 2025（x64） のバージョン 10.0.26100.0 から 10.0.26100.33650 未満が影響を受ける。\n・Windows Server 2025 (Server Core)（x64） のバージョン 10.0.26100.0 から 10.0.26100.33650 未満が影響を受ける。\n・公式の対象表：Microsoft / Outlook.com。影響ありとして記載：1.0.0以上、20260925.100未満。\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9612未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.9376未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7807未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7807未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7652未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7652未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.9711未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.9711未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.3231未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 26H2。影響ありとして記載：10.0.26300.0以上、10.0.26300.9711未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.23470未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.23470未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9612未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9612未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.9376未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.9376未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5761未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.33650未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.33650未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-96951", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:21.154Z", "lastSuccess": "2026-10-23T03:21:21.154Z", "sourceCheckedAt": "2026-10-23T02:43:53.704Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-96563", "aliases": [], "title": "Motors – Car Dealership & Classified Listings Plugin：ブラウザー上での不正な処理", "summary": "Motors プラグイン（バージョン 1.4.124 以下）において、'stm_f_s' パラメータが十分にサニタイズ・エスケープされていないため、認証済みの Subscriber 以上のユーザーが任意のウェブスクリプトをページに埋め込むことができ、ページを閲覧したユーザーのブラウザーでそのスクリプトが実行されます。また、stm_ajax_add_a_car AJAX ハンドラで必要な nonce が wp_footer で全ページに出力されるため、認証ユーザーは容易に取得でき、Subscriber 権限だけでも実行可能です。", "risk": "ページを表示した人のブラウザーで不正な処理が実行される可能性があります。", "product": "Motors – Car Dealership & Classified Listings Plugin", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "Wordfence", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Motors – Car Dealership & Classified Listings Plugin", "range": "<= 1.4.124" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-96563", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/14bb850e-df8a-46f0-b320-d8aedd763901?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L311", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L337", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L724", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L751", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1432", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1199", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3728105/", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96563", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-10-10T07:41:42.772Z", "modifiedAt": "2026-10-22T20:17:08.220Z", "fetchedAt": "2026-10-23T02:43:53.365Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions up to, and including, 1.4.124 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce required by the stm_ajax_add_a_car AJAX handler is emitted in wp_footer on every page, making it accessible to any authenticated user and removing any practical barrier to exploitation at the Subscriber level.", "sourceTitle": "Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "stylemix", "product": "Motors – Car Dealership & Classified Listings Plugin", "versions": [ { "version": "0", "status": "affected", "lessThanOrEqual": "1.4.124", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-96563", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "fetchedAt": "2026-10-23T02:43:53.365Z", "publishedAt": "2026-10-10T07:41:42.772Z", "modifiedAt": "2026-10-22T19:43:54.466Z", "state": "published", "provider": "Wordfence", "title": "Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter", "descriptions": [ { "lang": "en", "value": "The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions up to, and including, 1.4.124 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce required by the stm_ajax_add_a_car AJAX handler is emitted in wp_footer on every page, making it accessible to any authenticated user and removing any practical barrier to exploitation at the Subscriber level.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "stylemix", "product": "Motors – Car Dealership & Classified Listings Plugin", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "1.4.124", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM", "provider": "Wordfence", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/14bb850e-df8a-46f0-b320-d8aedd763901?source=cve", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/0" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L311", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/1" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L337", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/2" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L724", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/3" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L751", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/4" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1432", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/5" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1199", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/6" }, { "url": "https://plugins.trac.wordpress.org/changeset/3728105/", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/7" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"stylemix\",\"product\":\"Motors – Car Dealership & Classified Listings Plugin\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"1.4.124\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions up to, and including, 1.4.124 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce required by the stm_ajax_add_a_car AJAX handler is emitted in wp_footer on every page, making it accessible to any authenticated user and removing any practical barrier to exploitation at the Subscriber level.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"cweId\":\"CWE-79\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N\",\"baseScore\":6.4,\"baseSeverity\":\"MEDIUM\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-22T19:43:54.466Z", "fetchedAt": "2026-10-23T02:43:53.365Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T20:17:08.220Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Motors – Car Dealership & Classified Listings Pluginにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:21.221Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "3f0a488b0284c56a1fd258dd8501daeab6d7a269ac7e55d0482d390714c1af56", "sourceModifiedAt": "2026-10-22T20:17:08.220Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Motors プラグイン（バージョン 1.4.124 以下）において、'stm_f_s' パラメータが十分にサニタイズ・エスケープされていないため、認証済みの Subscriber 以上のユーザーが任意のウェブスクリプトをページに埋め込むことができ、ページを閲覧したユーザーのブラウザーでそのスクリプトが実行されます。また、stm_ajax_add_a_car AJAX ハンドラで必要な nonce が wp_footer で全ページに出力されるため、認証ユーザーは容易に取得でき、Subscriber 権限だけでも実行可能です。", "risk": "ページを表示した人のブラウザーで不正な処理が実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Motors – Car Dealership & Classified Listings Plugin のバージョン 1.4.124 以下すべてが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "Subscriber 以上の権限を持つ認証済みユーザーが攻撃を実行できます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "stm_ajax_add_a_car AJAX ハンドラで必要な nonce が wp_footer で全ページに出力され、認証ユーザーが取得できるため、実質的な障壁がありません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：stylemix / Motors – Car Dealership & Classified Listings Plugin。影響ありとして記載：1.4.124以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Motors – Car Dealership & Classified Listings Plugin」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-96563", "https://www.wordfence.com/threat-intel/vulnerabilities/id/14bb850e-df8a-46f0-b320-d8aedd763901?source=cve", "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L311", "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L337", "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L724", "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L751", "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1432", "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1199", "https://plugins.trac.wordpress.org/changeset/3728105/", "https://nvd.nist.gov/vuln/detail/CVE-2026-96563" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-96563", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/14bb850e-df8a-46f0-b320-d8aedd763901?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L311", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/init.js#L337", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L724", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/assets/js/frontend/filter.js#L751", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1432", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.123/includes/vehicle_functions.php#L1199", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3728105/", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96563", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "sourceField": "/containers/cna/title", "excerpt": "Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions up to, and including, 1.4.124 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce required by the stm_ajax_add_a_car AJAX handler is emitted in wp_footer on every page, making it accessible to any authenticated user and removing any practical barrier to exploitation at the Subscriber level.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96563.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"stylemix\",\"product\":\"Motors – Car Dealership & Classified Listings Plugin\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"1.4.124\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-96563（Motors – Car Dealership & Classified Listings Plugin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Motors – Car Dealership & Classified Listings Plugin のバージョン 1.4.124 以下すべてが影響を受けます。\n・Subscriber 以上の権限を持つ認証済みユーザーが攻撃を実行できます。\n・stm_ajax_add_a_car AJAX ハンドラで必要な nonce が wp_footer で全ページに出力され、認証ユーザーが取得できるため、実質的な障壁がありません。\n・公式の対象表：stylemix / Motors – Car Dealership & Classified Listings Plugin。影響ありとして記載：1.4.124以下の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-96563", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:21.221Z", "lastSuccess": "2026-10-23T03:21:21.221Z", "sourceCheckedAt": "2026-10-23T02:43:53.365Z", "errorCode": null }, "glossary": [ { "term": "WordPressのnonce", "meaning": "画面や操作に対応する確認用の値です。意図しない操作を防ぐ助けになりますが、これだけで本人確認や操作権限の確認ができるわけではありません。", "sourceUrl": "https://developer.wordpress.org/apis/security/nonces/", "kind": "general_definition" } ] } }, { "id": "CVE-2015-3306", "aliases": [], "title": "n/a：脆弱性情報", "summary": "ProFTPD 1.3.5 の mod_copy モジュールでは、リモートの攻撃者が site cpfr コマンドと site cpto コマンドを使って任意のファイルを読み書きできる。", "risk": "攻撃者が任意のファイルを読み書きできる。", "product": "ProFTPD ProFTPD", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2015-3306", "label": "CVE公式レコード" }, { "url": "http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec", "label": "CVE掲載の参考情報" }, { "url": "https://www.exploit-db.com/exploits/36803/", "label": "36803" }, { "url": "http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.debian.org/security/2015/dsa-3263", "label": "DSA-3263" }, { "url": "http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html", "label": "openSUSE-SU-2015:1031" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html", "label": "FEDORA-2015-7164" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html", "label": "FEDORA-2015-6401" }, { "url": "http://www.securityfocus.com/bid/74238", "label": "74238" }, { "url": "http://www.proftpd.org/", "label": "CISAが示す関連情報" }, { "url": "https://lists.debian.org/debian-security-announce/2015/msg00154.html", "label": "CISAが示す関連情報" }, { "url": "https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2015-05-18T15:00:00.000Z", "modifiedAt": "2026-10-09T16:02:13.824Z", "fetchedAt": "2026-10-23T02:42:58.689Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2015-3306", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "fetchedAt": "2026-10-23T02:42:58.689Z", "publishedAt": "2015-05-18T15:00:00.000Z", "modifiedAt": "2026-10-09T16:02:13.824Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.exploit-db.com/exploits/36803/", "label": "36803", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.debian.org/security/2015/dsa-3263", "label": "DSA-3263", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html", "label": "openSUSE-SU-2015:1031", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html", "label": "FEDORA-2015-7164", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html", "label": "FEDORA-2015-6401", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://www.securityfocus.com/bid/74238", "label": "74238", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "https://www.exploit-db.com/exploits/36742/", "label": "36742", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html", "label": "FEDORA-2015-7086", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3306", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":10,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-09T16:02:13.824Z", "fetchedAt": "2026-10-23T02:42:58.689Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-08T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:37:42.006Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0f29e38f3fe80e4e309e7a201eb677aad650d5c190181dfdd52a77711f332aa5", "sourceModifiedAt": "2026-10-09T16:02:13.824Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ProFTPD 1.3.5 の mod_copy モジュールでは、リモートの攻撃者が site cpfr コマンドと site cpto コマンドを使って任意のファイルを読み書きできる。", "risk": "攻撃者が任意のファイルを読み書きできる。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ProFTPD 1.3.5 の mod_copy モジュールが有効で、site cpfr および site cpto コマンドが使用可能な場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json" ], "evidenceIds": [ "E2" ] }, { "text": "「ProFTPD ProFTPD」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2015-3306", "http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec", "https://www.exploit-db.com/exploits/36803/", "http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html", "http://www.debian.org/security/2015/dsa-3263", "http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html", "http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html", "http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html", "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html", "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html", "http://www.securityfocus.com/bid/74238", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306", "http://www.proftpd.org/", "https://lists.debian.org/debian-security-announce/2015/msg00154.html", "https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2015-3306", "http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec", "https://www.exploit-db.com/exploits/36803/", "http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html", "http://www.debian.org/security/2015/dsa-3263", "http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html", "http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html", "http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html", "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html", "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html", "http://www.securityfocus.com/bid/74238", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306", "http://www.proftpd.org/", "https://lists.debian.org/debian-security-announce/2015/msg00154.html", "https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2015-3306", "http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec", "https://www.exploit-db.com/exploits/36803/", "http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html", "http://www.debian.org/security/2015/dsa-3263", "http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html", "http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html", "http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html", "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html", "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html", "http://www.securityfocus.com/bid/74238", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306", "http://www.proftpd.org/", "https://lists.debian.org/debian-security-announce/2015/msg00154.html", "https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2015-3306", "label": "CVE公式レコード" }, { "url": "http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec", "label": "CVE掲載の参考情報" }, { "url": "https://www.exploit-db.com/exploits/36803/", "label": "36803" }, { "url": "http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.debian.org/security/2015/dsa-3263", "label": "DSA-3263" }, { "url": "http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html", "label": "openSUSE-SU-2015:1031" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html", "label": "FEDORA-2015-7164" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html", "label": "FEDORA-2015-6401" }, { "url": "http://www.securityfocus.com/bid/74238", "label": "74238" }, { "url": "http://www.proftpd.org/", "label": "CISAが示す関連情報" }, { "url": "https://lists.debian.org/debian-security-announce/2015/msg00154.html", "label": "CISAが示す関連情報" }, { "url": "https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/3xxx/CVE-2015-3306.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2015-3306\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2015-3306（ProFTPD ProFTPD）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ProFTPD 1.3.5 の mod_copy モジュールが有効で、site cpfr および site cpto コマンドが使用可能な場合。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2015-3306", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:37:42.006Z", "lastSuccess": "2026-10-23T03:37:42.006Z", "sourceCheckedAt": "2026-10-23T02:42:58.689Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2015-5477", "aliases": [], "title": "n/a：サービス停止", "summary": "ISC BIND 9.x の 9.9.7-P2 未満および 9.10.x の 9.10.2-P3 未満のバージョンでは、リモートの攻撃者が TKEY クエリを送ることで、アサーション失敗が発生しデーモンが終了するため、サービスが停止します。", "risk": "サービスが停止し、名前解決が利用できなくなる可能性があります。", "product": "ISC BIND", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2015-5477", "label": "CVE公式レコード" }, { "url": "http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "label": "CVE掲載の参考情報" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html", "label": "openSUSE-SU-2015:1326" }, { "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415", "label": "CVE掲載の参考情報" }, { "url": "https://kb.juniper.net/JSA10783", "label": "CVE掲載の参考情報" }, { "url": "http://rhn.redhat.com/errata/RHSA-2015-1513.html", "label": "RHSA-2015:1513" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html", "label": "SUSE-SU-2015:1305" }, { "url": "https://security.netapp.com/advisory/ntap-20160114-0001/", "label": "CVE掲載の参考情報" }, { "url": "https://kb.isc.org/article/AA-01438", "label": "CVE掲載の参考情報" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html", "label": "FEDORA-2015-12316" }, { "url": "https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272", "label": "CISAが示す関連情報" }, { "url": "https://access.redhat.com/errata/RHSA-2015:1513.html", "label": "CISAが示す関連情報" }, { "url": "https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2015-07-29T14:00:00.000Z", "modifiedAt": "2026-10-09T03:55:29.574Z", "fetchedAt": "2026-10-23T02:42:58.955Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2015-5477", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "fetchedAt": "2026-10-23T02:42:58.955Z", "publishedAt": "2015-07-29T14:00:00.000Z", "modifiedAt": "2026-10-09T03:55:29.574Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html", "label": "openSUSE-SU-2015:1326", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://kb.juniper.net/JSA10783", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://rhn.redhat.com/errata/RHSA-2015-1513.html", "label": "RHSA-2015:1513", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html", "label": "SUSE-SU-2015:1305", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://security.netapp.com/advisory/ntap-20160114-0001/", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://kb.isc.org/article/AA-01438", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html", "label": "FEDORA-2015-12316", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://marc.info/?l=bugtraq&m=144017354030745&w=2", "label": "SSRT102175", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/31" }, { "url": "http://marc.info/?l=bugtraq&m=144294073801304&w=2", "label": "HPSBUX03511", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/24" }, { "url": "http://rhn.redhat.com/errata/RHSA-2016-0079.html", "label": "RHSA-2016:0079", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/14" }, { "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/15" }, { "url": "http://rhn.redhat.com/errata/RHSA-2015-1514.html", "label": "RHSA-2015:1514", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/16" }, { "url": "http://www.ubuntu.com/usn/USN-2693-1", "label": "USN-2693-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/17" }, { "url": "https://support.apple.com/kb/HT205032", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/18" }, { "url": "http://www.securitytracker.com/id/1033100", "label": "1033100", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/19" }, { "url": "https://kb.isc.org/article/AA-01307", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/20" }, { "url": "http://www.securityfocus.com/bid/76092", "label": "76092", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/21" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html", "label": "SUSE-SU-2015:1316", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/22" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html", "label": "openSUSE-SU-2015:1335", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/23" }, { "url": "https://www.exploit-db.com/exploits/37721/", "label": "37721", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/25" }, { "url": "http://rhn.redhat.com/errata/RHSA-2015-1515.html", "label": "RHSA-2015:1515", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/26" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html", "label": "SUSE-SU-2015:1322", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/27" }, { "url": "https://security.gentoo.org/glsa/201510-01", "label": "GLSA-201510-01", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/28" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html", "label": "SUSE-SU-2015:1304", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/29" }, { "url": "http://marc.info/?l=bugtraq&m=144181171013996&w=2", "label": "HPSBOV03506", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/30" }, { "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/32" }, { "url": "http://www.debian.org/security/2015/dsa-3319", "label": "DSA-3319", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/33" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html", "label": "FEDORA-2015-12357", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/34" }, { "url": "http://marc.info/?l=bugtraq&m=144000632319155&w=2", "label": "SSRT102211", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/44" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html", "label": "FEDORA-2015-12335", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/36" }, { "url": "https://www.exploit-db.com/exploits/37723/", "label": "37723", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/37" }, { "url": "https://kb.isc.org/article/AA-01305", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/38" }, { "url": "http://rhn.redhat.com/errata/RHSA-2016-0078.html", "label": "RHSA-2016:0078", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/39" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html", "label": "SUSE-SU-2016:0227", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/40" }, { "url": "https://kb.isc.org/article/AA-01306", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/41" }, { "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10126", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/42" }, { "url": "https://kb.isc.org/article/AA-01272", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/43" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-09T03:55:29.574Z", "fetchedAt": "2026-10-23T02:42:58.955Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-08T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "n/aにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:22.060Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "509a1665689f0bfc1f8c504cb3ec4cb436a0ce31a1c4d79e8cbde197a2d76ec7", "sourceModifiedAt": "2026-10-09T03:55:29.574Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ISC BIND 9.x の 9.9.7-P2 未満および 9.10.x の 9.10.2-P3 未満のバージョンでは、リモートの攻撃者が TKEY クエリを送ることで、アサーション失敗が発生しデーモンが終了するため、サービスが停止します。", "risk": "サービスが停止し、名前解決が利用できなくなる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象製品は ISC BIND の 9.x 系です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 9.9 系では 9.9.7-P2 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 9.10 系では 9.10.2-P3 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は TKEY クエリを送信できる環境が必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E2" ] }, { "text": "「ISC BIND」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2015-5477", "http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html", "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html", "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415", "https://kb.juniper.net/JSA10783", "http://rhn.redhat.com/errata/RHSA-2015-1513.html", "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html", "https://security.netapp.com/advisory/ntap-20160114-0001/", "https://kb.isc.org/article/AA-01438", "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477", "https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272", "https://access.redhat.com/errata/RHSA-2015:1513.html", "https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2015-5477", "http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html", "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html", "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415", "https://kb.juniper.net/JSA10783", "http://rhn.redhat.com/errata/RHSA-2015-1513.html", "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html", "https://security.netapp.com/advisory/ntap-20160114-0001/", "https://kb.isc.org/article/AA-01438", "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477", "https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272", "https://access.redhat.com/errata/RHSA-2015:1513.html", "https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2015-5477", "http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html", "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html", "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415", "https://kb.juniper.net/JSA10783", "http://rhn.redhat.com/errata/RHSA-2015-1513.html", "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html", "https://security.netapp.com/advisory/ntap-20160114-0001/", "https://kb.isc.org/article/AA-01438", "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477", "https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272", "https://access.redhat.com/errata/RHSA-2015:1513.html", "https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2015-5477", "label": "CVE公式レコード" }, { "url": "http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "label": "CVE掲載の参考情報" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html", "label": "openSUSE-SU-2015:1326" }, { "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415", "label": "CVE掲載の参考情報" }, { "url": "https://kb.juniper.net/JSA10783", "label": "CVE掲載の参考情報" }, { "url": "http://rhn.redhat.com/errata/RHSA-2015-1513.html", "label": "RHSA-2015:1513" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html", "label": "SUSE-SU-2015:1305" }, { "url": "https://security.netapp.com/advisory/ntap-20160114-0001/", "label": "CVE掲載の参考情報" }, { "url": "https://kb.isc.org/article/AA-01438", "label": "CVE掲載の参考情報" }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html", "label": "FEDORA-2015-12316" }, { "url": "https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272", "label": "CISAが示す関連情報" }, { "url": "https://access.redhat.com/errata/RHSA-2015:1513.html", "label": "CISAが示す関連情報" }, { "url": "https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5477.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2015-5477\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2015-5477（ISC BIND）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は ISC BIND の 9.x 系です。\n・バージョン 9.9 系では 9.9.7-P2 未満が影響を受けます。\n・バージョン 9.10 系では 9.10.2-P3 未満が影響を受けます。\n・攻撃者は TKEY クエリを送信できる環境が必要です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2015-5477", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:22.060Z", "lastSuccess": "2026-10-23T03:21:22.060Z", "sourceCheckedAt": "2026-10-23T02:42:58.955Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2016-3081", "aliases": [], "title": "n/a：コード実行", "summary": "Apache Struts 2.3.19 から 2.3.20.2、2.3.21 から 2.3.24.1、2.3.25 から 2.3.28 の間で、Dynamic Method Invocation が有効な場合、リモートの攻撃者が method: プレフィックスを利用したチェーン式に関連して任意のコードを実行できる。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "product": "Apache Struts", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "redhat", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2016-3081", "label": "CVE公式レコード" }, { "url": "http://www.securitytracker.com/id/1035665", "label": "1035665" }, { "url": "https://struts.apache.org/docs/s2-032.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", "label": "CVE掲載の参考情報" }, { "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", "label": "CVE掲載の参考情報" }, { "url": "https://www.exploit-db.com/exploits/39756/", "label": "39756" }, { "url": "http://www.securityfocus.com/bid/91787", "label": "91787" }, { "url": "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.securityfocus.com/bid/87327", "label": "87327" }, { "url": "https://cwiki.apache.org/confluence/display/WW/S2-032", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3081", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2016-04-26T14:00:00.000Z", "modifiedAt": "2026-10-09T03:55:30.407Z", "fetchedAt": "2026-10-23T02:42:59.752Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2016-3081", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "fetchedAt": "2026-10-23T02:42:59.752Z", "publishedAt": "2016-04-26T14:00:00.000Z", "modifiedAt": "2026-10-09T03:55:30.407Z", "state": "published", "provider": "redhat", "title": "", "descriptions": [ { "lang": "en", "value": "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.securitytracker.com/id/1035665", "label": "1035665", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://struts.apache.org/docs/s2-032.html", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://www.exploit-db.com/exploits/39756/", "label": "39756", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://www.securityfocus.com/bid/91787", "label": "91787", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://www.securityfocus.com/bid/87327", "label": "87327", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3081", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-09T03:55:30.407Z", "fetchedAt": "2026-10-23T02:42:59.752Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-08T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:37:42.009Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "617c5536c9dff9b1b025aea674f3875844bf3980b45a3f6faf9dc0b90f7a0eab", "sourceModifiedAt": "2026-10-09T03:55:30.407Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Apache Struts 2.3.19 から 2.3.20.2、2.3.21 から 2.3.24.1、2.3.25 から 2.3.28 の間で、Dynamic Method Invocation が有効な場合、リモートの攻撃者が method: プレフィックスを利用したチェーン式に関連して任意のコードを実行できる。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Apache Struts バージョン 2.3.19 から 2.3.20.2 が対象で、Dynamic Method Invocation が有効であることが条件。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json" ], "evidenceIds": [ "E1" ] }, { "text": "Apache Struts バージョン 2.3.21 から 2.3.24.1 が対象で、Dynamic Method Invocation が有効であることが条件。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json" ], "evidenceIds": [ "E1" ] }, { "text": "Apache Struts バージョン 2.3.25 から 2.3.28 が対象で、Dynamic Method Invocation が有効であることが条件。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Apache Struts」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2016-3081", "http://www.securitytracker.com/id/1035665", "https://struts.apache.org/docs/s2-032.html", "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", "https://www.exploit-db.com/exploits/39756/", "http://www.securityfocus.com/bid/91787", "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", "http://www.securityfocus.com/bid/87327", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081", "https://cwiki.apache.org/confluence/display/WW/S2-032", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2016-3081" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2016-3081", "http://www.securitytracker.com/id/1035665", "https://struts.apache.org/docs/s2-032.html", "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", "https://www.exploit-db.com/exploits/39756/", "http://www.securityfocus.com/bid/91787", "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", "http://www.securityfocus.com/bid/87327", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081", "https://cwiki.apache.org/confluence/display/WW/S2-032", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2016-3081" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2016-3081", "http://www.securitytracker.com/id/1035665", "https://struts.apache.org/docs/s2-032.html", "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", "https://www.exploit-db.com/exploits/39756/", "http://www.securityfocus.com/bid/91787", "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", "http://www.securityfocus.com/bid/87327", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081", "https://cwiki.apache.org/confluence/display/WW/S2-032", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2016-3081" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2016-3081", "label": "CVE公式レコード" }, { "url": "http://www.securitytracker.com/id/1035665", "label": "1035665" }, { "url": "https://struts.apache.org/docs/s2-032.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", "label": "CVE掲載の参考情報" }, { "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", "label": "CVE掲載の参考情報" }, { "url": "https://www.exploit-db.com/exploits/39756/", "label": "39756" }, { "url": "http://www.securityfocus.com/bid/91787", "label": "91787" }, { "url": "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.securityfocus.com/bid/87327", "label": "87327" }, { "url": "https://cwiki.apache.org/confluence/display/WW/S2-032", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3081", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3081.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2016-3081\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2016-3081（Apache Struts）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Apache Struts バージョン 2.3.19 から 2.3.20.2 が対象で、Dynamic Method Invocation が有効であることが条件。\n・Apache Struts バージョン 2.3.21 から 2.3.24.1 が対象で、Dynamic Method Invocation が有効であることが条件。\n・Apache Struts バージョン 2.3.25 から 2.3.28 が対象で、Dynamic Method Invocation が有効であることが条件。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2016-3081", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:37:42.009Z", "lastSuccess": "2026-10-23T03:37:42.009Z", "sourceCheckedAt": "2026-10-23T02:42:59.752Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2021-3199", "aliases": [], "title": "n/a：コード実行", "summary": "ONLYOFFICE Document Server の /upload エンドポイントで、JWT が使用されている場合に、画像アップロードパラメータに「/..」シーケンスを含めることで、ディレクトリトラバーサルとリモートコード実行が発生する可能性があります。この問題はバージョン 5.6.3 未満で存在します。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "product": "ONLYOFFICE Docs", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-3199", "label": "CVE公式レコード" }, { "url": "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563", "label": "CISAが示す関連情報" }, { "url": "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3199", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2021-01-22T02:41:34.000Z", "modifiedAt": "2026-10-09T03:55:31.111Z", "fetchedAt": "2026-10-23T02:43:17.795Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2021-3199", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "fetchedAt": "2026-10-23T02:43:17.795Z", "publishedAt": "2021-01-22T02:41:34.000Z", "modifiedAt": "2026-10-09T03:55:31.111Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3199", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-09T03:55:31.111Z", "fetchedAt": "2026-10-23T02:43:17.795Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-08T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:37:42.012Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "75dcf0611e2f5d5250ad687a73ca9ab7eecccf00a13cbd9ecd144da34e882cc2", "sourceModifiedAt": "2026-10-09T03:55:31.111Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ONLYOFFICE Document Server の /upload エンドポイントで、JWT が使用されている場合に、画像アップロードパラメータに「/..」シーケンスを含めることで、ディレクトリトラバーサルとリモートコード実行が発生する可能性があります。この問題はバージョン 5.6.3 未満で存在します。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ONLYOFFICE Document Server のバージョンが 5.6.3 未満で、JWT 認証が有効になっている環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json" ], "evidenceIds": [ "E1" ] }, { "text": "画像アップロード時にパラメータに「/..」シーケンスが含まれる場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json" ], "evidenceIds": [ "E2" ] }, { "text": "「ONLYOFFICE Docs」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-3199", "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563", "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py", "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2021-3199" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2021-3199", "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563", "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py", "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2021-3199" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-3199", "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563", "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py", "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2021-3199" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-3199", "label": "CVE公式レコード" }, { "url": "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563", "label": "CISAが示す関連情報" }, { "url": "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3199", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3199.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2021-3199\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2021-3199（ONLYOFFICE Docs）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ONLYOFFICE Document Server のバージョンが 5.6.3 未満で、JWT 認証が有効になっている環境。\n・画像アップロード時にパラメータに「/..」シーケンスが含まれる場合。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-3199", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:37:42.012Z", "lastSuccess": "2026-10-23T03:37:42.012Z", "sourceCheckedAt": "2026-10-23T02:43:17.795Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-22894", "aliases": [], "title": "n/a：情報の漏えい", "summary": "Strapi のバージョン 4.5.5 以前では、管理パネルへのアクセス権を持つ攻撃者がクエリフィルタを悪用して、ユーザーの機密情報を取得できる可能性があります。攻撃者は機密情報を含む列でユーザーをフィルタし、API の応答から値を推測できます。攻撃者がスーパーユーザー（スーパー管理者）権限を持つ場合、すべてのユーザーのパスワードハッシュとパスワードリセットトークンを取得できる可能性があります。また、管理パネルでユーザー名とメールアドレスへのアクセス権を持つ、エディターやオーサーなどの低権限ロールのアカウントに対しても、同様にすべての API ユーザーの機密情報を取得できるが、他の管理者アカウントの情報は取得できません。", "risk": "攻撃者はユーザーの機密情報、パスワードハッシュ、パスワードリセットトークンを取得できるため、アカウントの不正利用や情報漏洩のリスクがあります。", "product": "Strapi Strapi", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-22894", "label": "CVE公式レコード" }, { "url": "https://github.com/strapi/strapi/releases", "label": "CISAが示す関連情報" }, { "url": "https://www.ghostccamm.com/blog/multi_strapi_vulns/", "label": "CVE掲載の参考情報" }, { "url": "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22894", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-04-19T00:00:00.000Z", "modifiedAt": "2026-10-09T03:55:26.444Z", "fetchedAt": "2026-10-23T02:43:25.623Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-22894", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "fetchedAt": "2026-10-23T02:43:25.623Z", "publishedAt": "2023-04-19T00:00:00.000Z", "modifiedAt": "2026-10-09T03:55:26.444Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/strapi/strapi/releases", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.ghostccamm.com/blog/multi_strapi_vulns/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-22894", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.2,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-09T03:55:26.444Z", "fetchedAt": "2026-10-23T02:43:25.623Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-08T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "n/aに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:24.481Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a0c71554fd14e444732bed6306fc1bf211f883c1c331a5bfb72d69be47fe4f95", "sourceModifiedAt": "2026-10-09T03:55:26.444Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Strapi のバージョン 4.5.5 以前では、管理パネルへのアクセス権を持つ攻撃者がクエリフィルタを悪用して、ユーザーの機密情報を取得できる可能性があります。攻撃者は機密情報を含む列でユーザーをフィルタし、API の応答から値を推測できます。攻撃者がスーパーユーザー（スーパー管理者）権限を持つ場合、すべてのユーザーのパスワードハッシュとパスワードリセットトークンを取得できる可能性があります。また、管理パネルでユーザー名とメールアドレスへのアクセス権を持つ、エディターやオーサーなどの低権限ロールのアカウントに対しても、同様にすべての API ユーザーの機密情報を取得できるが、他の管理者アカウントの情報は取得できません。", "risk": "攻撃者はユーザーの機密情報、パスワードハッシュ、パスワードリセットトークンを取得できるため、アカウントの不正利用や情報漏洩のリスクがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Strapi のバージョン 4.5.5 までが対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Strapi Strapi」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-22894", "https://github.com/strapi/strapi/releases", "https://www.ghostccamm.com/blog/multi_strapi_vulns/", "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2023-22894" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-22894", "https://github.com/strapi/strapi/releases", "https://www.ghostccamm.com/blog/multi_strapi_vulns/", "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2023-22894" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-22894", "https://github.com/strapi/strapi/releases", "https://www.ghostccamm.com/blog/multi_strapi_vulns/", "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2023-22894" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-22894", "label": "CVE公式レコード" }, { "url": "https://github.com/strapi/strapi/releases", "label": "CISAが示す関連情報" }, { "url": "https://www.ghostccamm.com/blog/multi_strapi_vulns/", "label": "CVE掲載の参考情報" }, { "url": "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22894", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22894.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-22894\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-22894（Strapi Strapi）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Strapi のバージョン 4.5.5 までが対象です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-22894", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:24.481Z", "lastSuccess": "2026-10-23T03:21:24.481Z", "sourceCheckedAt": "2026-10-23T02:43:25.623Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-88779", "aliases": [], "title": "ADC / Gateway：サービス停止", "summary": "NetScaler ADC と NetScaler Gateway にメモリオーバーフロー脆弱性があり、サービス拒否が発生する可能性があります。", "risk": "サービスが利用できなくなる可能性があります。", "product": "ADC / Gateway", "category": "other", "component": "package", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "NetScaler", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "ADC", "range": "< 14.1-73.41" }, { "product": "ADC", "range": "< 13.1-64.28" }, { "product": "ADC", "range": "< 14.1-73.41 FIPS" }, { "product": "ADC", "range": "< 13.1-37.282" }, { "product": "Gateway", "range": "< 14.1-73.41" }, { "product": "Gateway", "range": "< 13.1-64.28" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-88779", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "label": "CISAが示す関連情報" }, { "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88779", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-04T02:35:35.525Z", "modifiedAt": "2026-10-05T03:55:38.096Z", "fetchedAt": "2026-10-23T02:43:51.854Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.", "sourceTitle": "Memory overflow vulnerability leading to Denial of Service", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "NetScaler", "product": "ADC", "versions": [ { "status": "affected", "version": "0", "lessThan": "14.1-73.41", "versionType": "Patch" }, { "status": "affected", "version": "0", "lessThan": "13.1-64.28", "versionType": "Patch" }, { "status": "affected", "version": "0", "lessThan": "14.1-73.41 FIPS", "versionType": "Patch" }, { "status": "affected", "version": "0", "lessThan": "13.1-37.282", "versionType": "Patch" } ], "defaultStatus": "unaffected" }, { "vendor": "NetScaler", "product": "Gateway", "versions": [ { "status": "affected", "version": "0", "lessThan": "14.1-73.41", "versionType": "Patch" }, { "status": "affected", "version": "0", "lessThan": "13.1-64.28", "versionType": "Patch" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-88779", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "fetchedAt": "2026-10-23T02:43:51.854Z", "publishedAt": "2026-10-04T02:35:35.525Z", "modifiedAt": "2026-10-05T03:55:38.096Z", "state": "published", "provider": "NetScaler", "title": "Memory overflow vulnerability leading to Denial of Service", "descriptions": [ { "lang": "en", "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "NetScaler", "product": "ADC", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "14.1-73.41", "versionType": "Patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "13.1-64.28", "versionType": "Patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "14.1-73.41 FIPS", "versionType": "Patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0", "lessThan": "13.1-37.282", "versionType": "Patch", "status": "affected" } ] }, { "vendor": "NetScaler", "product": "Gateway", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "14.1-73.41", "versionType": "Patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "0", "lessThan": "13.1-64.28", "versionType": "Patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.7, "baseSeverity": "HIGH", "provider": "NetScaler", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "label": "NetScaler", "tags": [], "provider": "NetScaler", "sourcePath": "/containers/cna/references/0" }, { "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.41\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.28\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.41 FIPS\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-37.282\",\"versionType\":\"Patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.41\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.28\",\"versionType\":\"Patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.7,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-05T03:55:38.096Z", "fetchedAt": "2026-10-23T02:43:51.854Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-04T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "ADC / Gatewayにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:25.812Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "059079c60d7a324cf7e3458ad420fa65c6c39e45f5bdf2db0f34c053a74ca8c0", "sourceModifiedAt": "2026-10-05T03:55:38.096Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "NetScaler ADC と NetScaler Gateway にメモリオーバーフロー脆弱性があり、サービス拒否が発生する可能性があります。", "risk": "サービスが利用できなくなる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "ADC のバージョンが 14.1-73.41 未満の場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E2", "E3", "E1" ] }, { "text": "ADC のバージョンが 13.1-64.28 未満の場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E2", "E3", "E1" ] }, { "text": "ADC の FIPS バージョンが 14.1-73.41 未満の場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E2", "E3", "E1" ] }, { "text": "ADC のバージョンが 13.1-37.282 未満の場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E2", "E3", "E1" ] }, { "text": "Gateway のバージョンが 14.1-73.41 未満の場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E2", "E4", "E1" ] }, { "text": "Gateway のバージョンが 13.1-64.28 未満の場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E2", "E4", "E1" ] }, { "text": "公式の対象表：NetScaler / ADC。影響ありとして記載：14.1-73.41未満の版。影響ありとして記載：13.1-64.28未満の版。影響ありとして記載：14.1-73.41 FIPS未満の版。影響ありとして記載：13.1-37.282未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1-73.41未満の版。影響ありとして記載：13.1-64.28未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ADC / Gateway」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-88779", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779", "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-88779" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-88779", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779", "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-88779" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-88779", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779", "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-88779" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-88779", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "label": "CISAが示す関連情報" }, { "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88779", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourceField": "/containers/cna/title", "excerpt": "Memory overflow vulnerability leading to Denial of Service", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.41\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.28\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.41 FIPS\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-37.282\",\"versionType\":\"Patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88779.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.41\",\"versionType\":\"Patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.28\",\"versionType\":\"Patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-88779\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-88779（ADC / Gateway）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ADC のバージョンが 14.1-73.41 未満の場合に影響があります。\n・ADC のバージョンが 13.1-64.28 未満の場合に影響があります。\n・ADC の FIPS バージョンが 14.1-73.41 未満の場合に影響があります。\n・ADC のバージョンが 13.1-37.282 未満の場合に影響があります。\n・Gateway のバージョンが 14.1-73.41 未満の場合に影響があります。\n・Gateway のバージョンが 13.1-64.28 未満の場合に影響があります。\n・公式の対象表：NetScaler / ADC。影響ありとして記載：14.1-73.41未満の版。影響ありとして記載：13.1-64.28未満の版。影響ありとして記載：14.1-73.41 FIPS未満の版。影響ありとして記載：13.1-37.282未満の版。\n・公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1-73.41未満の版。影響ありとして記載：13.1-64.28未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-88779", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:25.812Z", "lastSuccess": "2026-10-23T03:21:25.812Z", "sourceCheckedAt": "2026-10-23T02:43:51.854Z", "errorCode": null }, "glossary": [ { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-102489", "aliases": [], "title": "Zammad：古い6.5系以前から、サポート中の系列への更新を確認", "summary": "問い合わせ管理ソフトZammadの古い環境で、利用中の接続を乗っ取られ、サーバーで不正な処理を実行される問題です。開発元は6.5系以前の利用者に直ちに更新するよう求め、7.0以降では実行環境の違いにより、この問題を実際に悪用できないと説明しています。", "risk": "影響を受ける環境では、攻撃者がZammadを動かす「zammad」ユーザーの権限でプログラムを実行する可能性があります。", "product": "Zammad", "category": "other", "component": "package", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "DIVD", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:A/AU:Y/V:C", "affected": [ { "product": "Zammad", "range": "開発元は6.5系以前の更新を推奨。CVE対象表の6.5.4境界には食い違いあり" } ], "fixed": [], "steps": [ "6.5系以前を使っている場合は、開発元の「直ちに更新」という案内に沿って、管理担当者にサポート中のZammadへの移行を依頼してください。", "サーバーへ直接ログインできる人を信頼する管理者に限定します。7系を使う場合も、開発元が7.2.0で取り込んだ追加の強化と、現在使える更新の適用状況を確認してください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "label": "CVEの説明と対象表" }, { "url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "label": "Zammad開発元の影響評価・更新方針" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-102489", "label": "CVE公式レコード" }, { "url": "https://csirt.divd.nl/DIVD-2026-00015", "label": "CVE掲載の参考情報" }, { "url": "https://csirt.divd.nl/CVE-2026-102489", "label": "CVE掲載の参考情報" }, { "url": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489", "label": "CISA KEV（悪用確認）" }, { "url": "https://zammad.com/en/product/releases/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102489", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-09-30T16:21:19.937Z", "modifiedAt": "2026-10-19T09:10:59.656Z", "fetchedAt": "2026-10-23T02:43:40.833Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.", "sourceTitle": "Undisclosed RCE in Zammad v6.3 and higher", "summaryMethod": "公式資料を照合した個別の日本語解説。一般的な操作手順は別に区別しています。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Linux", "Docker" ], "product": "Zammad", "vendor": "Zammad GmbH", "versions": [ { "lessThan": "6.3.0", "status": "unknown", "version": "*", "versionType": "semver" }, { "lessThan": "6.5.4", "status": "affected", "version": "6.3.0", "versionType": "semver" }, { "lessThan": "7.1.3", "status": "unknown", "version": "7.0.0", "versionType": "semver" } ] } ], "configurationNotes": "対象環境・機能: Linux / Docker。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-102489", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "fetchedAt": "2026-10-23T02:43:40.833Z", "publishedAt": "2026-09-30T16:21:19.937Z", "modifiedAt": "2026-10-19T09:10:59.656Z", "state": "published", "provider": "DIVD", "title": "Undisclosed RCE in Zammad v6.3 and higher", "descriptions": [ { "lang": "en", "value": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Zammad GmbH", "product": "Zammad", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Linux", "Docker" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "*", "lessThan": "6.3.0", "versionType": "semver", "status": "unknown" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "6.3.0", "lessThan": "6.5.4", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "7.0.0", "lessThan": "7.1.3", "versionType": "semver", "status": "unknown" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:A/AU:Y/V:C", "baseScore": 8.7, "baseSeverity": "HIGH", "provider": "DIVD", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C", "baseScore": 9.4, "baseSeverity": "CRITICAL", "provider": "DIVD", "sourcePath": "/containers/cna/metrics/1/cvssV4_0" } ], "references": [ { "url": "https://csirt.divd.nl/DIVD-2026-00015", "label": "DIVD", "tags": [ "third-party-advisory" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/0" }, { "url": "https://csirt.divd.nl/CVE-2026-102489", "label": "DIVD", "tags": [ "third-party-advisory" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/1" }, { "url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "label": "DIVD", "tags": [ "vendor-advisory" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/2" }, { "url": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "label": "DIVD", "tags": [ "technical-description" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102489", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Linux\",\"Docker\"],\"product\":\"Zammad\",\"vendor\":\"Zammad GmbH\",\"versions\":[{\"lessThan\":\"6.3.0\",\"status\":\"unknown\",\"version\":\"*\",\"versionType\":\"semver\"},{\"lessThan\":\"6.5.4\",\"status\":\"affected\",\"version\":\"6.3.0\",\"versionType\":\"semver\"},{\"lessThan\":\"7.1.3\",\"status\":\"unknown\",\"version\":\"7.0.0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"YES\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":8.7,\"baseSeverity\":\"HIGH\",\"exploitMaturity\":\"ATTACKED\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"LOW\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"userInteraction\":\"PASSIVE\",\"valueDensity\":\"CONCENTRATED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:A/AU:Y/V:C\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "sourcePath": "/containers/cna/metrics/1/cvssV4_0", "text": "{\"Automatable\":\"YES\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":9.4,\"baseSeverity\":\"CRITICAL\",\"exploitMaturity\":\"ATTACKED\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"userInteraction\":\"PASSIVE\",\"valueDensity\":\"CONCENTRATED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-19T09:10:59.656Z", "fetchedAt": "2026-10-23T02:43:40.833Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-02T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Zammadにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "reviewed", "reviewedAt": "2026-10-23T03:34:23.000Z", "reviewState": "current", "summary": "問い合わせ管理ソフトZammadの古い環境で、利用中の接続を乗っ取られ、サーバーで不正な処理を実行される問題です。開発元は6.5系以前の利用者に直ちに更新するよう求め、7.0以降では実行環境の違いにより、この問題を実際に悪用できないと説明しています。", "risk": "影響を受ける環境では、攻撃者がZammadを動かす「zammad」ユーザーの権限でプログラムを実行する可能性があります。", "applicability": [ { "text": "CVEの対象表はLinux/Docker上の6.3.0以上6.5.4未満を「影響あり」としています。6.3.0未満は「不明」です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json" ], "evidenceIds": [ "E2" ] }, { "text": "CVEの文章は「6.3.0から6.5.4」と書く一方、対象表は6.5.4未満です。この境界には食い違いがあります。6.5.4を安全な修正版と読み替えず、開発元の「6.5系以前は直ちに更新」という案内に沿って移行を確認してください。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490" ], "evidenceIds": [ "E1", "E2", "E3" ] }, { "text": "開発元は7.0以降について、同じ問題を実際には悪用できないと説明しています。さらに関連するコードの強化を7.2.0へ取り込んでいます。これを「7.2.0未満すべてがこの攻撃の対象」という意味にはしません。", "kind": "fact", "sourceUrls": [ "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490" ], "evidenceIds": [ "E3", "E5" ] }, { "text": "最初に「Zammad」を使っているか、開発元・製品名・バージョンを確認します。同じカテゴリの製品を使っているだけでは、この問題の対象とは限りません。", "kind": "check", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-102489", "https://csirt.divd.nl/DIVD-2026-00015", "https://csirt.divd.nl/CVE-2026-102489", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489", "https://zammad.com/en/product/releases/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-102489" ] } ], "versionChecks": [ { "text": "「Zammad」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-102489", "https://csirt.divd.nl/DIVD-2026-00015", "https://csirt.divd.nl/CVE-2026-102489", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489", "https://zammad.com/en/product/releases/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-102489" ] } ], "actions": [ { "text": "6.5系以前を使っている場合は、開発元の「直ちに更新」という案内に沿って、管理担当者にサポート中のZammadへの移行を依頼してください。", "kind": "procedure", "sourceUrls": [ "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490" ], "evidenceIds": [ "E4" ] }, { "text": "サーバーへ直接ログインできる人を信頼する管理者に限定します。7系を使う場合も、開発元が7.2.0で取り込んだ追加の強化と、現在使える更新の適用状況を確認してください。", "kind": "procedure", "sourceUrls": [ "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490" ], "evidenceIds": [ "E3", "E5" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-102489", "https://csirt.divd.nl/DIVD-2026-00015", "https://csirt.divd.nl/CVE-2026-102489", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489", "https://zammad.com/en/product/releases/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-102489" ] } ], "temporaryMitigations": [], "verification": [ { "text": "更新後に製品情報の画面で版・ビルド番号を記録し、このCVEの修正が含まれることを提供元の説明と照合します。普段の主要な操作も確認し、担当者から適用日時と結果を受け取ってください。", "kind": "procedure", "sourceUrls": [ "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-102489", "https://csirt.divd.nl/DIVD-2026-00015", "https://csirt.divd.nl/CVE-2026-102489", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489", "https://zammad.com/en/product/releases/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-102489" ] } ], "unknowns": [ "利用中の環境を検査した結果ではありません。製品名・版・利用条件と、実際に修正が適用されているかを確認してください。", "公式CVEの6.5.4の境界表現と、開発元の系列単位の説明を併記しています。このページは6.5.4を修正済みと認定していません。" ], "supportRequest": "件名：CVE-2026-102489（Zammad）の影響と対応状況の確認\n\n利用中のサイト・機器・サービス：[記入してください]\n製品名・開発元：[記入してください]\n現在のバージョン・ビルド番号：[不明なら「不明」と記入]\n\nCVE-2026-102489について、次を教えてください。\n1. この環境は対象ですか。対象外の場合は、版・設定・機能などの判断理由を教えてください。\n2. 対象の場合、修正を含む版・パッケージ番号と、更新方法を教えてください。古い版に修正を取り込んでいる場合は、このCVEへの対応状況を教えてください。\n3. いつ対応できますか。再起動・停止時間・事前のバックアップや確認作業は必要ですか。\n4. すぐ更新できない場合、正式な回避策とその限界・副作用を教えてください。利用を続けてよい条件も知りたいです。\n5. 対応完了後、修正を確認できる版・設定・対応日時を連絡してください。\n\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-102489", "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "label": "CVEの説明と対象表" }, { "url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "label": "Zammad開発元の影響評価・更新方針" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-102489", "label": "CVE公式レコード" }, { "url": "https://csirt.divd.nl/DIVD-2026-00015", "label": "CVE掲載の参考情報" }, { "url": "https://csirt.divd.nl/CVE-2026-102489", "label": "CVE掲載の参考情報" }, { "url": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489", "label": "CISA KEV（悪用確認）" }, { "url": "https://zammad.com/en/product/releases/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102489", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "reviewedSourceFingerprint": "reviewed-source-v1:85e308f2e878118990036cadc1fcaf78aedddd050e3087773675870e79e8109b", "reviewedSourceScope": "official_evidence", "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102489.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Linux\",\"Docker\"],\"product\":\"Zammad\",\"vendor\":\"Zammad GmbH\",\"versions\":[{\"lessThan\":\"6.3.0\",\"status\":\"unknown\",\"version\":\"*\",\"versionType\":\"semver\"},{\"lessThan\":\"6.5.4\",\"status\":\"affected\",\"version\":\"6.3.0\",\"versionType\":\"semver\"},{\"lessThan\":\"7.1.3\",\"status\":\"unknown\",\"version\":\"7.0.0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "sourceField": "article:CVE-2026-102489", "excerpt": "Zammad 7.0 and later are not affected in practice", "language": "en", "representation": "html_text_excerpt" }, { "id": "E4", "sourceUrl": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "sourceField": "article:recommendations-to-administrators", "excerpt": "6.5 or an older version, update immediately.", "language": "en", "representation": "html_text_excerpt" }, { "id": "E5", "sourceUrl": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "sourceField": "article:CVE-2026-102489", "excerpt": "change is included in Zammad 7.2.0.", "language": "en", "representation": "html_text_excerpt" } ], "summaryEvidenceIds": [ "E1", "E3" ], "riskEvidenceIds": [ "E1", "E3" ], "glossary": [] } }, { "id": "CVE-2026-102490", "aliases": [], "title": "Zammad：権限の奪取", "summary": "Zammad の DEB または RPM パッケージ（バージョン 1.5.0 から 7.2.2 未満）をインストールした環境では、ローカルの攻撃者が zammad サービスアカウントのファイルシステム書き込み権限を持っている場合、数秒で root 権限にエスカレーションできる可能性があります。", "risk": "攻撃者がホスト上でフルの root 権限を取得できる。", "product": "Zammad", "category": "other", "component": "package", "severity": "high", "cvss": 8.5, "cvssVersion": "4.0", "cvssSource": "DIVD", "cvssVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D", "affected": [ { "product": "Zammad", "range": ">= 1.5.0 / < 7.2.2（環境: Linux）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "label": "CVE：DIVD" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-102490", "label": "CVE公式レコード" }, { "url": "https://csirt.divd.nl/DIVD-2026-00015", "label": "CVE掲載の参考情報" }, { "url": "https://csirt.divd.nl/CVE-2026-102490", "label": "CVE掲載の参考情報" }, { "url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq", "label": "CVE掲載の参考情報" }, { "url": "https://zammad.com/en/product/releases/", "label": "CISAが示す関連情報" }, { "url": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102490", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-09-30T16:21:20.601Z", "modifiedAt": "2026-10-08T19:55:53.033Z", "fetchedAt": "2026-10-23T02:43:40.858Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.", "sourceTitle": "Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Zammad GmbH", "product": "Zammad", "platforms": [ "Linux" ], "versions": [ { "status": "affected", "version": "1.5.0", "lessThan": "7.2.2", "versionType": "semver" }, { "status": "unknown", "version": "*", "lessThan": "1.5.0", "versionType": "semver" }, { "status": "unaffected", "version": "7.2.2", "lessThan": "*", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "configurationNotes": "対象環境・機能: Linux。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-102490", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "fetchedAt": "2026-10-23T02:43:40.858Z", "publishedAt": "2026-09-30T16:21:20.601Z", "modifiedAt": "2026-10-08T19:55:53.033Z", "state": "published", "provider": "DIVD", "title": "Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package", "descriptions": [ { "lang": "en", "value": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Zammad GmbH", "product": "Zammad", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Linux" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "1.5.0", "lessThan": "7.2.2", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "*", "lessThan": "1.5.0", "versionType": "semver", "status": "unknown" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "7.2.2", "lessThan": "*", "versionType": "semver", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D", "baseScore": 8.5, "baseSeverity": "HIGH", "provider": "DIVD", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C", "baseScore": 9.4, "baseSeverity": "CRITICAL", "provider": "DIVD", "sourcePath": "/containers/cna/metrics/1/cvssV4_0" } ], "references": [ { "url": "https://csirt.divd.nl/DIVD-2026-00015", "label": "DIVD", "tags": [ "third-party-advisory" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/0" }, { "url": "https://csirt.divd.nl/CVE-2026-102490", "label": "DIVD", "tags": [ "third-party-advisory" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/1" }, { "url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "label": "DIVD", "tags": [ "vendor-advisory" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/2" }, { "url": "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq", "label": "DIVD", "tags": [ "vendor-advisory", "technical-description" ], "provider": "DIVD", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Zammad GmbH\",\"product\":\"Zammad\",\"platforms\":[\"Linux\"],\"versions\":[{\"status\":\"affected\",\"version\":\"1.5.0\",\"lessThan\":\"7.2.2\",\"versionType\":\"semver\"},{\"status\":\"unknown\",\"version\":\"*\",\"lessThan\":\"1.5.0\",\"versionType\":\"semver\"},{\"status\":\"unaffected\",\"version\":\"7.2.2\",\"lessThan\":\"*\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"ATTACKED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"YES\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"DIFFUSE\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.5,\"vectorString\":\"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "sourcePath": "/containers/cna/metrics/1/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"PASSIVE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"ATTACKED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"YES\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"CONCENTRATED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.4,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-08T19:55:53.033Z", "fetchedAt": "2026-10-23T02:43:40.858Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-02T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Zammadに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:27.365Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "44b0035457978b16f987e1ab177b6dded0b3530cc7426be8331e6d108442e0a6", "sourceModifiedAt": "2026-10-08T19:55:53.033Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Zammad の DEB または RPM パッケージ（バージョン 1.5.0 から 7.2.2 未満）をインストールした環境では、ローカルの攻撃者が zammad サービスアカウントのファイルシステム書き込み権限を持っている場合、数秒で root 権限にエスカレーションできる可能性があります。", "risk": "攻撃者がホスト上でフルの root 権限を取得できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は Linux 上の Zammad で、パッケージは packager.io でビルドされた DEB または RPM 形式のもの。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるバージョンは 1.5.0 以上 7.2.2 未満（すべてのリリースされたパッケージ版）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "バージョン 7.2.2 以降は影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "ソースコードからのインストールや公式コンテナイメージからのインストールは影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者は既に zammad サービスアカウントとしてファイルシステムへの書き込み権限を持っている必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "サービスプロセスは最初 root 権限で起動し、zammad アカウントが所有・書き込み可能なファイルを実行した後にそのアカウントに権限を落とす。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるサービスは停止すると自動的に再起動されるため、管理者の操作は不要。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Zammad GmbH / Zammad。影響ありとして記載：1.5.0以上、7.2.2未満。影響は未確定として記載：1.5.0未満の版。影響なしとして記載：7.2.2以上（原資料の上限表記は「*」）。対象の環境：Linux", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Zammad」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-102490", "https://csirt.divd.nl/DIVD-2026-00015", "https://csirt.divd.nl/CVE-2026-102490", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490", "https://zammad.com/en/product/releases/", "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-102490" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-102490", "https://csirt.divd.nl/DIVD-2026-00015", "https://csirt.divd.nl/CVE-2026-102490", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490", "https://zammad.com/en/product/releases/", "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-102490" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-102490", "https://csirt.divd.nl/DIVD-2026-00015", "https://csirt.divd.nl/CVE-2026-102490", "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490", "https://zammad.com/en/product/releases/", "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-102490" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "label": "CVE：DIVD" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-102490", "label": "CVE公式レコード" }, { "url": "https://csirt.divd.nl/DIVD-2026-00015", "label": "CVE掲載の参考情報" }, { "url": "https://csirt.divd.nl/CVE-2026-102490", "label": "CVE掲載の参考情報" }, { "url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq", "label": "CVE掲載の参考情報" }, { "url": "https://zammad.com/en/product/releases/", "label": "CISAが示す関連情報" }, { "url": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102490", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "sourceField": "/containers/cna/title", "excerpt": "Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102490.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Zammad GmbH\",\"product\":\"Zammad\",\"platforms\":[\"Linux\"],\"versions\":[{\"status\":\"affected\",\"version\":\"1.5.0\",\"lessThan\":\"7.2.2\",\"versionType\":\"semver\"},{\"status\":\"unknown\",\"version\":\"*\",\"lessThan\":\"1.5.0\",\"versionType\":\"semver\"},{\"status\":\"unaffected\",\"version\":\"7.2.2\",\"lessThan\":\"*\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-102490\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-102490（Zammad）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Linux 上の Zammad で、パッケージは packager.io でビルドされた DEB または RPM 形式のもの。\n・影響を受けるバージョンは 1.5.0 以上 7.2.2 未満（すべてのリリースされたパッケージ版）。\n・バージョン 7.2.2 以降は影響なし。\n・ソースコードからのインストールや公式コンテナイメージからのインストールは影響なし。\n・攻撃者は既に zammad サービスアカウントとしてファイルシステムへの書き込み権限を持っている必要がある。\n・サービスプロセスは最初 root 権限で起動し、zammad アカウントが所有・書き込み可能なファイルを実行した後にそのアカウントに権限を落とす。\n・影響を受けるサービスは停止すると自動的に再起動されるため、管理者の操作は不要。\n・公式の対象表：Zammad GmbH / Zammad。影響ありとして記載：1.5.0以上、7.2.2未満。影響は未確定として記載：1.5.0未満の版。影響なしとして記載：7.2.2以上（原資料の上限表記は「*」）。対象の環境：Linux\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-102490", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:27.365Z", "lastSuccess": "2026-10-23T03:21:27.365Z", "sourceCheckedAt": "2026-10-23T02:43:40.858Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-104286", "aliases": [], "title": "FortiMail：ログインなしでファイルを書き込まれるおそれ。更新番号は提供元に照合", "summary": "メールを扱うFortiMailのサーバーに、外部の人がログインせずにファイルを書き込める問題です。公式資料の「対象の版」と「更新予定の版」に食い違いがあるため、番号だけで対応完了にせず、保守会社へ製品名・系列・現在の版を伝えて更新を依頼してください。", "risk": "細工したWeb通信により、FortiMailが動くシステムへ本来許可されていないファイルを書き込まれる可能性があります。ここで確認した公式説明だけから、サーバー全体の乗っ取りまで確実に起きるとは判断できません。", "product": "FortiMail", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "fortinet", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "affected": [ { "product": "FortiMail", "range": "公式の説明・対象表・修正予定に差異あり。本文の系列別条件を照合" } ], "fixed": [], "steps": [ "FortiMailの対策欄が示す更新予定は、8.0系が8.0.1以降、7.6系が7.6.6以降、7.4系が7.4.8以降、7.2系が7.2.10以降です。資料には「upcoming（今後提供予定）」とあるため、現在の配布状況とこのCVEの修正済みであることを保守会社に確認し、該当系列の正式な更新を適用してください。", "FortiMail 7.0系は対象表にある一方、対策欄に同系列の更新先がありません。7.0系を利用している場合は、サポート中の系列への移行先と手順をFortinetまたは保守会社に確認してください。", "同じ対策欄には別製品FortiRecorderの7.6.1以降・7.2.12以降・今後提供予定の7.0.7以降も記載されています。これらをFortiMailの更新番号として使わないでください。FortiMail Cloudは25.1（資料上は未リリース）で提供元が対処し顧客操作不要と説明しています。契約中のCloud環境への反映状況は提供元に確認します。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "label": "Fortinetが登録したCVEの説明・対象表・対策欄" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-104286", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104286", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104286", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-01T19:17:38.938Z", "modifiedAt": "2026-10-07T17:59:34.842Z", "fetchedAt": "2026-10-23T02:43:41.517Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.", "sourceTitle": "", "summaryMethod": "公式資料を照合した個別の日本語解説。一般的な操作手順は別に区別しています。", "state": "published", "affectedDetails": [ { "vendor": "Fortinet", "product": "FortiMail", "cpes": [ "cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "versions": [ { "version": "8.0.0", "status": "affected" }, { "versionType": "semver", "version": "7.6.0", "lessThanOrEqual": "7.6.5", "status": "affected" }, { "versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.6", "status": "affected" }, { "versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.9", "status": "affected" }, { "versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.9", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-104286", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "fetchedAt": "2026-10-23T02:43:41.517Z", "publishedAt": "2026-10-01T19:17:38.938Z", "modifiedAt": "2026-10-07T17:59:34.842Z", "state": "published", "provider": "fortinet", "title": "", "descriptions": [ { "lang": "en", "value": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Fortinet", "product": "FortiMail", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "7.6.0", "lessThanOrEqual": "7.6.5", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "7.4.0", "lessThanOrEqual": "7.4.6", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "7.2.0", "lessThanOrEqual": "7.2.9", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "7.0.0", "lessThanOrEqual": "7.0.9", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Upgrade to upcoming FortiMail version 8.0.1 or above\nUpgrade to upcoming FortiMail version 7.6.6 or above\nUpgrade to upcoming FortiMail version 7.4.8 or above\nUpgrade to upcoming FortiMail version 7.2.10 or above\nUpgrade to FortiRecorder version 7.6.1 or above\nUpgrade to FortiRecorder version 7.2.12 or above\nUpgrade to upcoming FortiRecorder version 7.0.7 or above\nFortinet remediated this issue in FortiMail Cloud version 25.1 (not released) and hence customers do not need to perform any action.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "Execute unauthorized code or commands", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "fortinet", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "label": "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "tags": [], "provider": "fortinet", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104286", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiMail\",\"cpes\":[\"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"8.0.0\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.6.0\",\"lessThanOrEqual\":\"7.6.5\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.6\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.9\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.9\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Upgrade to upcoming FortiMail version 8.0.1 or above\nUpgrade to upcoming FortiMail version 7.6.6 or above\nUpgrade to upcoming FortiMail version 7.4.8 or above\nUpgrade to upcoming FortiMail version 7.2.10 or above\nUpgrade to FortiRecorder version 7.6.1 or above\nUpgrade to FortiRecorder version 7.2.12 or above\nUpgrade to upcoming FortiRecorder version 7.0.7 or above\nFortinet remediated this issue in FortiMail Cloud version 25.1 (not released) and hence customers do not need to perform any action.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-22\",\"description\":\"Execute unauthorized code or commands\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-07T17:59:34.842Z", "fetchedAt": "2026-10-23T02:43:41.517Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-10-01T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "FortiMailにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "reviewed", "reviewedAt": "2026-10-23T03:34:23.000Z", "reviewState": "current", "summary": "メールを扱うFortiMailのサーバーに、外部の人がログインせずにファイルを書き込める問題です。公式資料の「対象の版」と「更新予定の版」に食い違いがあるため、番号だけで対応完了にせず、保守会社へ製品名・系列・現在の版を伝えて更新を依頼してください。", "risk": "細工したWeb通信により、FortiMailが動くシステムへ本来許可されていないファイルを書き込まれる可能性があります。ここで確認した公式説明だけから、サーバー全体の乗っ取りまで確実に起きるとは判断できません。", "applicability": [ { "text": "公式の対象表には、FortiMail 8.0.0、7.6.0～7.6.5、7.4.0～7.4.6、7.2.0～7.2.9、7.0.0～7.0.9が挙がっています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json" ], "evidenceIds": [ "E2" ] }, { "text": "一方、同じCVEの文章は8.0.1・7.6.6・7.4.8までを対象に含め、対策欄はそれらを「今後提供予定の更新先」としています。7.4.7の扱いもこの記録だけでは確定できません。該当する版は対象外と自己判断せず、Fortinetまたは保守会社に確認してください。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json" ], "evidenceIds": [ "E1", "E2", "E3" ] }, { "text": "攻撃者はFortiMailへのログイン権限を必要とせず、HTTP/HTTPSの通信を使います。自分の環境に外部から通信が届くかは、管理担当者が公開設定を確認します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json" ], "evidenceIds": [ "E1" ] }, { "text": "最初に「FortiMail」を使っているか、開発元・製品名・バージョンを確認します。同じカテゴリの製品を使っているだけでは、この問題の対象とは限りません。", "kind": "check", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-104286", "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104286", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-104286" ] } ], "versionChecks": [ { "text": "「FortiMail」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-104286", "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104286", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-104286" ] } ], "actions": [ { "text": "FortiMailの対策欄が示す更新予定は、8.0系が8.0.1以降、7.6系が7.6.6以降、7.4系が7.4.8以降、7.2系が7.2.10以降です。資料には「upcoming（今後提供予定）」とあるため、現在の配布状況とこのCVEの修正済みであることを保守会社に確認し、該当系列の正式な更新を適用してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json" ], "evidenceIds": [ "E3" ] }, { "text": "FortiMail 7.0系は対象表にある一方、対策欄に同系列の更新先がありません。7.0系を利用している場合は、サポート中の系列への移行先と手順をFortinetまたは保守会社に確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json" ], "evidenceIds": [ "E2", "E3" ] }, { "text": "同じ対策欄には別製品FortiRecorderの7.6.1以降・7.2.12以降・今後提供予定の7.0.7以降も記載されています。これらをFortiMailの更新番号として使わないでください。FortiMail Cloudは25.1（資料上は未リリース）で提供元が対処し顧客操作不要と説明しています。契約中のCloud環境への反映状況は提供元に確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json" ], "evidenceIds": [ "E3" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-104286", "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104286", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-104286" ] } ], "temporaryMitigations": [], "verification": [ { "text": "更新後に製品情報の画面で版・ビルド番号を記録し、このCVEの修正が含まれることを提供元の説明と照合します。普段の主要な操作も確認し、担当者から適用日時と結果を受け取ってください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-104286", "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104286", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-104286" ] } ], "unknowns": [ "利用中の環境を検査した結果ではありません。製品名・版・利用条件と、実際に修正が適用されているかを確認してください。", "公式レコード内で対象範囲と更新先が食い違っています。このため、AI向けの固定バージョン一覧にも確定した修正版として一律登録していません。公開済みかどうかを、予定の記載から推測しないでください。" ], "supportRequest": "件名：CVE-2026-104286（FortiMail）の影響と対応状況の確認\n\n利用中のサイト・機器・サービス：[記入してください]\n製品名・開発元：[記入してください]\n現在のバージョン・ビルド番号：[不明なら「不明」と記入]\n\nCVE-2026-104286について、次を教えてください。\n1. この環境は対象ですか。対象外の場合は、版・設定・機能などの判断理由を教えてください。\n2. 対象の場合、修正を含む版・パッケージ番号と、更新方法を教えてください。古い版に修正を取り込んでいる場合は、このCVEへの対応状況を教えてください。\n3. いつ対応できますか。再起動・停止時間・事前のバックアップや確認作業は必要ですか。\n4. すぐ更新できない場合、正式な回避策とその限界・副作用を教えてください。利用を続けてよい条件も知りたいです。\n5. 対応完了後、修正を確認できる版・設定・対応日時を連絡してください。\n\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-104286", "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "label": "Fortinetが登録したCVEの説明・対象表・対策欄" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-104286", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-175", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104286", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104286", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "reviewedSourceFingerprint": "reviewed-source-v1:94a1ae4929643147eef75dc1aca88290017e601e3e2d89fca55829202cf57b92", "reviewedSourceScope": "official_evidence", "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiMail\",\"cpes\":[\"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"8.0.0\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.6.0\",\"lessThanOrEqual\":\"7.6.5\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.6\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.9\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.9\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104286.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Upgrade to upcoming FortiMail version 8.0.1 or above\nUpgrade to upcoming FortiMail version 7.6.6 or above\nUpgrade to upcoming FortiMail version 7.4.8 or above\nUpgrade to upcoming FortiMail version 7.2.10 or above\nUpgrade to FortiRecorder version 7.6.1 or above\nUpgrade to FortiRecorder version 7.2.12 or above\nUpgrade to upcoming FortiRecorder version 7.0.7 or above\nFortinet remediated this issue in FortiMail Cloud version 25.1 (not released) and hence customers do not need to perform any action.", "language": "en", "representation": "source_excerpt" } ], "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1" ], "glossary": [] } }, { "id": "CVE-2026-76504", "aliases": [], "title": "Cisco Catalyst SD-WAN Manager：脆弱性情報", "summary": "Cisco Catalyst SD-WAN Manager の API セッションベース認証管理において、URI エンコードの不適切な処理により、特定の API エンドポイントへのアクセスを制限する認証ルールを回避できる脆弱性があります。認証されていないリモート攻撃者が細工した HTTP リクエストを送信することで、認証をバイパスし、管理者ユーザーの権限で API にアクセスできる可能性があります。", "risk": "攻撃者が管理者権限で API にアクセスできる可能性があります。", "product": "Cisco Catalyst SD-WAN Manager", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.099" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.0.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.1.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.302" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.303" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.097" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.098" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.0.1a" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.501_ES" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.31" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.32" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_925" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1_927" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.2_937" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_928" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1_930" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.0.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_937" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.02" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.17" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.0.18.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.0.18.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1EFT2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.813" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.19" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.814" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.20" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.24" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.8.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1EFT2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.19" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.23" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.25" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.27" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.29" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.31" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.32" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.33" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.0.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3_LI_ Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.38" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.39" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.25" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.26" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.40" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.41" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.19" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.45" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.17" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.46" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.47" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.20" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.13" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.23" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.25" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.24" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.26" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.51" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.29" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.6.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.13.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.13.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.14.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.14.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.13" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.0.03" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.16.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.16.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.401" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6.0.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4_Monthly_ES5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7_LI _Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3_ LI _Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.501" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7.1_LI _Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.7_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.9_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.4_LI_ Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.7.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.1.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.9.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.9.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.3.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.1.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.5_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.5.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.7.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.9.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.9.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.6_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.4_LI_Imagess" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.8_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.8.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.8.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.10_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.6.0.5_PSIRTAUG" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.4.0.5_PSIRTAUG" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.8.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.10.0.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.2.0.02" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.2.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.4.1.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.2.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.6.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.4.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.10.1.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.6.1.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.2.1.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.8.2.01" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-76504", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76504", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-09-30T13:04:32.095Z", "modifiedAt": "2026-10-02T23:23:29.275Z", "fetchedAt": "2026-10-23T02:43:50.906Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.\r\n\r\nThis vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.", "sourceTitle": "Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "versions": [ { "version": "20.1.12", "status": "affected" }, { "version": "19.2.1", "status": "affected" }, { "version": "18.4.4", "status": "affected" }, { "version": "18.4.5", "status": "affected" }, { "version": "20.1.1.1", "status": "affected" }, { "version": "20.1.1", "status": "affected" }, { "version": "19.3.0", "status": "affected" }, { "version": "19.2.2", "status": "affected" }, { "version": "19.2.099", "status": "affected" }, { "version": "18.3.6", "status": "affected" }, { "version": "18.3.7", "status": "affected" }, { "version": "19.2.0", "status": "affected" }, { "version": "18.3.8", "status": "affected" }, { "version": "19.0.0", "status": "affected" }, { "version": "19.1.0", "status": "affected" }, { "version": "18.4.302", "status": "affected" }, { "version": "18.4.303", "status": "affected" }, { "version": "19.2.097", "status": "affected" }, { "version": "19.2.098", "status": "affected" }, { "version": "17.2.10", "status": "affected" }, { "version": "18.3.6.1", "status": "affected" }, { "version": "19.0.1a", "status": "affected" }, { "version": "18.2.0", "status": "affected" }, { "version": "18.4.3", "status": "affected" }, { "version": "18.4.1", "status": "affected" }, { "version": "17.2.8", "status": "affected" }, { "version": "18.3.3.1", "status": "affected" }, { "version": "18.4.0", "status": "affected" }, { "version": "18.3.1", "status": "affected" }, { "version": "17.2.6", "status": "affected" }, { "version": "17.2.9", "status": "affected" }, { "version": "18.3.4", "status": "affected" }, { "version": "17.2.5", "status": "affected" }, { "version": "18.3.1.1", "status": "affected" }, { "version": "18.3.5", "status": "affected" }, { "version": "18.4.0.1", "status": "affected" }, { "version": "18.3.3", "status": "affected" }, { "version": "17.2.7", "status": "affected" }, { "version": "17.2.4", "status": "affected" }, { "version": "18.3.0", "status": "affected" }, { "version": "19.2.3", "status": "affected" }, { "version": "18.4.501_ES", "status": "affected" }, { "version": "20.3.1", "status": "affected" }, { "version": "20.1.2", "status": "affected" }, { "version": "19.2.929", "status": "affected" }, { "version": "19.2.31", "status": "affected" }, { "version": "20.3.2", "status": "affected" }, { "version": "19.2.32", "status": "affected" }, { "version": "20.3.2_925", "status": "affected" }, { "version": "20.3.2.1", "status": "affected" }, { "version": "20.3.2.1_927", "status": "affected" }, { "version": "18.4.6", "status": "affected" }, { "version": "20.1.2_937", "status": "affected" }, { "version": "20.4.1", "status": "affected" }, { "version": "20.3.2_928", "status": "affected" }, { "version": "20.3.2_929", "status": "affected" }, { "version": "20.4.1.0.1", "status": "affected" }, { "version": "20.3.2.1_930", "status": "affected" }, { "version": "19.2.4", "status": "affected" }, { "version": "20.5.0.1.1", "status": "affected" }, { "version": "20.4.1.1", "status": "affected" }, { "version": "20.3.3", "status": "affected" }, { "version": "19.2.4.0.1", "status": "affected" }, { "version": "20.3.2_937", "status": "affected" }, { "version": "20.3.3.1", "status": "affected" }, { "version": "20.5.1", "status": "affected" }, { "version": "20.1.3", "status": "affected" }, { "version": "20.3.3.0.4", "status": "affected" }, { "version": "20.3.3.1.2", "status": "affected" }, { "version": "20.3.3.1.1", "status": "affected" }, { "version": "20.4.1.2", "status": "affected" }, { "version": "20.3.3.0.2", "status": "affected" }, { "version": "20.4.1.1.5", "status": "affected" }, { "version": "20.4.1.0.01", "status": "affected" }, { "version": "20.4.1.0.02", "status": "affected" }, { "version": "20.3.3.1.7", "status": "affected" }, { "version": "20.3.3.1.5", "status": "affected" }, { "version": "20.5.1.0.1", "status": "affected" }, { "version": "20.3.3.1.10", "status": "affected" }, { "version": "20.3.3.0.8", "status": "affected" }, { "version": "20.4.2", "status": "affected" }, { "version": "20.4.2.0.1", "status": "affected" }, { "version": "20.3.4", "status": "affected" }, { "version": "20.3.3.0.14", "status": "affected" }, { "version": "19.2.4.0.8", "status": "affected" }, { "version": "19.2.4.0.9", "status": "affected" }, { "version": "20.3.4.0.1", "status": "affected" }, { "version": "20.3.2.0.5", "status": "affected" }, { "version": "20.6.1", "status": "affected" }, { "version": "20.5.1.0.2", "status": "affected" }, { "version": "20.3.3.0.17", "status": "affected" }, { "version": "20.6.1.1", "status": "affected" }, { "version": "20.6.0.18.3", "status": "affected" }, { "version": "20.3.2.0.6", "status": "affected" }, { "version": "20.6.0.18.4", "status": "affected" }, { "version": "20.4.2.0.2", "status": "affected" }, { "version": "20.3.3.0.16", "status": "affected" }, { "version": "20.3.4.0.5", "status": "affected" }, { "version": "20.6.1.0.1", "status": "affected" }, { "version": "20.3.4.0.6", "status": "affected" }, { "version": "20.6.2", "status": "affected" }, { "version": "20.7.1EFT2", "status": "affected" }, { "version": "20.3.4.0.9", "status": "affected" }, { "version": "20.3.4.0.11", "status": "affected" }, { "version": "20.4.2.0.4", "status": "affected" }, { "version": "20.3.3.0.18", "status": "affected" }, { "version": "20.7.1", "status": "affected" }, { "version": "20.6.2.1", "status": "affected" }, { "version": "20.3.4.1", "status": "affected" }, { "version": "20.5.1.1", "status": "affected" }, { "version": "20.4.2.1", "status": "affected" }, { "version": "20.4.2.1.1", "status": "affected" }, { "version": "20.3.4.1.1", "status": "affected" }, { "version": "20.3.813", "status": "affected" }, { "version": "20.3.4.0.19", "status": "affected" }, { "version": "20.4.2.2.1", "status": "affected" }, { "version": "20.5.1.2", "status": "affected" }, { "version": "20.3.4.2", "status": "affected" }, { "version": "20.3.814", "status": "affected" }, { "version": "20.4.2.2", "status": "affected" }, { "version": "20.6.2.2", "status": "affected" }, { "version": "20.3.4.2.1", "status": "affected" }, { "version": "20.7.1.1", "status": "affected" }, { "version": "20.3.4.1.2", "status": "affected" }, { "version": "20.6.2.2.2", "status": "affected" }, { "version": "20.3.4.0.20", "status": "affected" }, { "version": "20.6.2.2.3", "status": "affected" }, { "version": "20.4.2.2.2", "status": "affected" }, { "version": "20.3.5", "status": "affected" }, { "version": "20.6.2.0.4", "status": "affected" }, { "version": "20.4.2.2.3", "status": "affected" }, { "version": "20.3.4.0.24", "status": "affected" }, { "version": "20.6.2.2.7", "status": "affected" }, { "version": "20.6.3", "status": "affected" }, { "version": "20.3.4.2.2", "status": "affected" }, { "version": "20.4.2.2.4", "status": "affected" }, { "version": "20.7.1.0.2", "status": "affected" }, { "version": "20.8.1", "status": "affected" }, { "version": "20.3.5.0.8", "status": "affected" }, { "version": "20.3.5.0.9", "status": "affected" }, { "version": "20.4.2.2.8", "status": "affected" }, { "version": "20.3.5.0.7", "status": "affected" }, { "version": "20.6.3.0.7", "status": "affected" }, { "version": "20.6.3.0.5", "status": "affected" }, { "version": "20.6.3.0.10", "status": "affected" }, { "version": "20.6.3.0.2", "status": "affected" }, { "version": "20.7.2", "status": "affected" }, { "version": "20.9.1EFT2", "status": "affected" }, { "version": "20.6.3.0.11", "status": "affected" }, { "version": "20.6.3.1", "status": "affected" }, { "version": "20.6.3.0.14", "status": "affected" }, { "version": "20.6.4", "status": "affected" }, { "version": "20.9.1", "status": "affected" }, { "version": "20.6.3.0.19", "status": "affected" }, { "version": "20.6.3.0.18", "status": "affected" }, { "version": "20.3.6", "status": "affected" }, { "version": "20.9.1.1", "status": "affected" }, { "version": "20.6.3.0.23", "status": "affected" }, { "version": "20.6.4.0.4", "status": "affected" }, { "version": "20.6.3.0.25", "status": "affected" }, { "version": "20.6.5", "status": "affected" }, { "version": "20.6.3.0.27", "status": "affected" }, { "version": "20.9.2", "status": "affected" }, { "version": "20.9.2.1", "status": "affected" }, { "version": "20.6.3.0.29", "status": "affected" }, { "version": "20.6.3.0.31", "status": "affected" }, { "version": "20.6.3.0.32", "status": "affected" }, { "version": "20.10.1", "status": "affected" }, { "version": "20.6.3.0.33", "status": "affected" }, { "version": "20.9.2.0.01", "status": "affected" }, { "version": "20.9.1_LI_Images", "status": "affected" }, { "version": "20.10.1_LI_Images", "status": "affected" }, { "version": "20.9.2_LI_Images", "status": "affected" }, { "version": "20.3.7", "status": "affected" }, { "version": "20.9.3", "status": "affected" }, { "version": "20.6.5.1", "status": "affected" }, { "version": "20.11.1", "status": "affected" }, { "version": "20.11.1_LI_Images", "status": "affected" }, { "version": "20.9.3_LI_ Images", "status": "affected" }, { "version": "20.6.3.1.1", "status": "affected" }, { "version": "20.9.3.0.2", "status": "affected" }, { "version": "20.6.5.1.2", "status": "affected" }, { "version": "20.9.3.0.3", "status": "affected" }, { "version": "20.4.2.3", "status": "affected" }, { "version": "20.6.3.2", "status": "affected" }, { "version": "20.6.4.1", "status": "affected" }, { "version": "20.6.3.0.38", "status": "affected" }, { "version": "20.6.3.0.39", "status": "affected" }, { "version": "20.3.5.1", "status": "affected" }, { "version": "20.3.4.3", "status": "affected" }, { "version": "20.9.3.1", "status": "affected" }, { "version": "20.3.3.2", "status": "affected" }, { "version": "20.6.5.2", "status": "affected" }, { "version": "20.3.7.1", "status": "affected" }, { "version": "20.10.1.1", "status": "affected" }, { "version": "20.6.5.2.1", "status": "affected" }, { "version": "20.3.4.0.25", "status": "affected" }, { "version": "20.6.2.2.4", "status": "affected" }, { "version": "20.6.1.2", "status": "affected" }, { "version": "20.11.1.1", "status": "affected" }, { "version": "20.9.3.0.5", "status": "affected" }, { "version": "20.3.4.0.26", "status": "affected" }, { "version": "20.6.5.1.3", "status": "affected" }, { "version": "20.6.3.0.40", "status": "affected" }, { "version": "20.1.3.1", "status": "affected" }, { "version": "20.9.2.2", "status": "affected" }, { "version": "20.6.5.2.3", "status": "affected" }, { "version": "20.6.5.1.4", "status": "affected" }, { "version": "20.6.5.3", "status": "affected" }, { "version": "20.6.3.0.41", "status": "affected" }, { "version": "20.9.3.0.7", "status": "affected" }, { "version": "20.6.5.1.5", "status": "affected" }, { "version": "20.9.3.0.4", "status": "affected" }, { "version": "20.6.4.0.19", "status": "affected" }, { "version": "20.6.5.1.6", "status": "affected" }, { "version": "20.9.3.0.8", "status": "affected" }, { "version": "20.6.3.3", "status": "affected" }, { "version": "20.3.7.2", "status": "affected" }, { "version": "20.6.5.4", "status": "affected" }, { "version": "20.6.5.1.7", "status": "affected" }, { "version": "20.9.3.0.12", "status": "affected" }, { "version": "20.6.4.2", "status": "affected" }, { "version": "20.6.5.5", "status": "affected" }, { "version": "20.9.3.2", "status": "affected" }, { "version": "20.11.1.2", "status": "affected" }, { "version": "20.6.3.4", "status": "affected" }, { "version": "20.10.1.2", "status": "affected" }, { "version": "20.6.5.1.9", "status": "affected" }, { "version": "20.9.3.0.16", "status": "affected" }, { "version": "20.6.3.0.45", "status": "affected" }, { "version": "20.6.5.1.10", "status": "affected" }, { "version": "20.9.3.0.17", "status": "affected" }, { "version": "20.6.5.2.4", "status": "affected" }, { "version": "20.6.4.0.21", "status": "affected" }, { "version": "20.9.3.0.18", "status": "affected" }, { "version": "20.6.3.0.46", "status": "affected" }, { "version": "20.6.3.0.47", "status": "affected" }, { "version": "20.9.2.3", "status": "affected" }, { "version": "20.9.3.2_LI_Images", "status": "affected" }, { "version": "20.9.3.0.21", "status": "affected" }, { "version": "20.9.3.0.20", "status": "affected" }, { "version": "20.9.4_LI_Images", "status": "affected" }, { "version": "20.9.4", "status": "affected" }, { "version": "20.6.5.1.11", "status": "affected" }, { "version": "20.12.1", "status": "affected" }, { "version": "20.12.1_LI_Images", "status": "affected" }, { "version": "20.6.5.1.13", "status": "affected" }, { "version": "20.9.3.0.23", "status": "affected" }, { "version": "20.6.5.2.8", "status": "affected" }, { "version": "20.9.4.1", "status": "affected" }, { "version": "20.9.4.1_LI_Images", "status": "affected" }, { "version": "20.9.3.0.25", "status": "affected" }, { "version": "20.9.3.0.24", "status": "affected" }, { "version": "20.6.5.1.14", "status": "affected" }, { "version": "20.3.8", "status": "affected" }, { "version": "20.6.6", "status": "affected" }, { "version": "20.9.3.0.26", "status": "affected" }, { "version": "20.6.3.0.51", "status": "affected" }, { "version": "20.9.3.0.29", "status": "affected" }, { "version": "20.12.2", "status": "affected" }, { "version": "20.12.2_LI_Images", "status": "affected" }, { "version": "20.6.6.0.1", "status": "affected" }, { "version": "20.13.1_LI_Images", "status": "affected" }, { "version": "20.9.4.0.4", "status": "affected" }, { "version": "20.13.1", "status": "affected" }, { "version": "20.9.4.1.1", "status": "affected" }, { "version": "20.9.5", "status": "affected" }, { "version": "20.9.5_LI_Images", "status": "affected" }, { "version": "20.12.3_LI_Images", "status": "affected" }, { "version": "20.12.3", "status": "affected" }, { "version": "20.9.4.1.3", "status": "affected" }, { "version": "20.6.7", "status": "affected" }, { "version": "20.9.5.1", "status": "affected" }, { "version": "20.9.5.1_LI_Images", "status": "affected" }, { "version": "20.9.4.1.6", "status": "affected" }, { "version": "20.14.1", "status": "affected" }, { "version": "20.14.1_LI_Images", "status": "affected" }, { "version": "20.9.5.2", "status": "affected" }, { "version": "20.9.5.2.1", "status": "affected" }, { "version": "20.9.5.2_LI_Images", "status": "affected" }, { "version": "20.12.3.1", "status": "affected" }, { "version": "20.12.4", "status": "affected" }, { "version": "20.15.1_LI_Images", "status": "affected" }, { "version": "20.15.1", "status": "affected" }, { "version": "20.9.5.1.4", "status": "affected" }, { "version": "20.9.5.2.7", "status": "affected" }, { "version": "20.9.5.2.13", "status": "affected" }, { "version": "20.9.6", "status": "affected" }, { "version": "20.9.6_LI_Images", "status": "affected" }, { "version": "20.9.5.2.14", "status": "affected" }, { "version": "20.6.8", "status": "affected" }, { "version": "20.12.4.0.03", "status": "affected" }, { "version": "20.16.1", "status": "affected" }, { "version": "20.16.1_LI_Images", "status": "affected" }, { "version": "20.12.4_LI_Images", "status": "affected" }, { "version": "20.9.5.2.16", "status": "affected" }, { "version": "20.12.4.0.4", "status": "affected" }, { "version": "20.12.401", "status": "affected" }, { "version": "20.9.5.3", "status": "affected" }, { "version": "20.9.5.3_LI_Images", "status": "affected" }, { "version": "20.12.4.1_LI_Images", "status": "affected" }, { "version": "20.12.4.1", "status": "affected" }, { "version": "20.9.5.2.21", "status": "affected" }, { "version": "20.9.6.0.3", "status": "affected" }, { "version": "20.12.4.0.6", "status": "affected" }, { "version": "20.15.2_LI_Images", "status": "affected" }, { "version": "20.15.2", "status": "affected" }, { "version": "20.12.4_Monthly_ES5", "status": "affected" }, { "version": "20.12.5", "status": "affected" }, { "version": "20.12.5_LI_Images", "status": "affected" }, { "version": "20.9.7_LI _Images", "status": "affected" }, { "version": "20.9.7", "status": "affected" }, { "version": "20.15.3", "status": "affected" }, { "version": "20.15.3_ LI _Images", "status": "affected" }, { "version": "20.12.501", "status": "affected" }, { "version": "20.12.5.1_LI_Images", "status": "affected" }, { "version": "20.12.5.1", "status": "affected" }, { "version": "20.12.5.2_LI_Images", "status": "affected" }, { "version": "20.12.5.2", "status": "affected" }, { "version": "20.15.3.1", "status": "affected" }, { "version": "20.15.4_LI_Images", "status": "affected" }, { "version": "20.15.4", "status": "affected" }, { "version": "20.9.7.1_LI _Images", "status": "affected" }, { "version": "20.9.7.1", "status": "affected" }, { "version": "20.18.1", "status": "affected" }, { "version": "20.18.1_LI_Images", "status": "affected" }, { "version": "20.12.6_LI_Images", "status": "affected" }, { "version": "20.12.6", "status": "affected" }, { "version": "20.12.5.1.01", "status": "affected" }, { "version": "26.0.1", "status": "affected" }, { "version": "20.9.8", "status": "affected" }, { "version": "20.9.8_LI_Images", "status": "affected" }, { "version": "20.18.2", "status": "affected" }, { "version": "20.15.4.1_LI_Images", "status": "affected" }, { "version": "20.15.4.1", "status": "affected" }, { "version": "20.18.2_LI_Images", "status": "affected" }, { "version": "26.1.1", "status": "affected" }, { "version": "26.1.1_LI_Images", "status": "affected" }, { "version": "20.18.2.1_LI_Images", "status": "affected" }, { "version": "20.18.2.1", "status": "affected" }, { "version": "20.15.4.2_LI_Images", "status": "affected" }, { "version": "20.15.4.2", "status": "affected" }, { "version": "20.12.6.1", "status": "affected" }, { "version": "20.12.6.1_LI_Images", "status": "affected" }, { "version": "20.12.5.3", "status": "affected" }, { "version": "20.12.5.3_LI_Images", "status": "affected" }, { "version": "20.9.8.2_LI_Images", "status": "affected" }, { "version": "20.9.8.2", "status": "affected" }, { "version": "20.18.3", "status": "affected" }, { "version": "20.18.3_LI_Images", "status": "affected" }, { "version": "20.15.5", "status": "affected" }, { "version": "20.15.5_LI_Images", "status": "affected" }, { "version": "20.12.7", "status": "affected" }, { "version": "20.12.7_LI_Images", "status": "affected" }, { "version": "20.9.9", "status": "affected" }, { "version": "20.9.9_LI_Images", "status": "affected" }, { "version": "20.18.2.2", "status": "affected" }, { "version": "20.18.2.2_LI_Images", "status": "affected" }, { "version": "20.12.5.4", "status": "affected" }, { "version": "20.12.5.4_LI_ Images", "status": "affected" }, { "version": "20.12.7.1_LI_Images", "status": "affected" }, { "version": "20.12.6.2_LI_Images", "status": "affected" }, { "version": "20.12.7.1", "status": "affected" }, { "version": "20.15.5.1", "status": "affected" }, { "version": "20.15.4.3", "status": "affected" }, { "version": "20.15.4.3_LI_Images", "status": "affected" }, { "version": "20.15.5.1_LI_Images", "status": "affected" }, { "version": "20.12.6.2", "status": "affected" }, { "version": "20.15.5.2", "status": "affected" }, { "version": "20.15.5.2_LI_Images", "status": "affected" }, { "version": "26.1.1.1_LI_Images", "status": "affected" }, { "version": "20.15.4.4", "status": "affected" }, { "version": "20.15.4.4_LI_Images", "status": "affected" }, { "version": "26.1.1.1", "status": "affected" }, { "version": "20.9.9.1_LI_Images", "status": "affected" }, { "version": "20.9.9.1", "status": "affected" }, { "version": "20.18.3.1_LI_Images", "status": "affected" }, { "version": "20.18.3.1", "status": "affected" }, { "version": "26.1.1.2", "status": "affected" }, { "version": "26.1.1.2_LI_Images", "status": "affected" }, { "version": "20.15.4.5", "status": "affected" }, { "version": "20.15.4.5_LI_Images", "status": "affected" }, { "version": "20.15.5.3", "status": "affected" }, { "version": "20.15.5.3_LI_Images", "status": "affected" }, { "version": "20.12.7.2_LI_Images", "status": "affected" }, { "version": "20.12.7.2", "status": "affected" }, { "version": "20.9.9.2", "status": "affected" }, { "version": "20.9.9.2_LI_Images", "status": "affected" }, { "version": "20.15.6", "status": "affected" }, { "version": "20.15.6_LI_Images", "status": "affected" }, { "version": "20.18.4_LI_Imagess", "status": "affected" }, { "version": "20.18.4", "status": "affected" }, { "version": "20.12.8", "status": "affected" }, { "version": "20.12.8_LI_Images", "status": "affected" }, { "version": "20.18.4_LI_Images", "status": "affected" }, { "version": "20.12.8.1", "status": "affected" }, { "version": "20.12.8.1_LI_Images", "status": "affected" }, { "version": "20.9.10_LI_Images", "status": "affected" }, { "version": "20.9.10", "status": "affected" }, { "version": "26.1.2_LI_Images", "status": "affected" }, { "version": "26.1.2", "status": "affected" }, { "version": "20.15.6.0.5_PSIRTAUG", "status": "affected" }, { "version": "20.18.4.0.5_PSIRTAUG", "status": "affected" }, { "version": "20.12.8.1.1", "status": "affected" }, { "version": "20.9.10.0.01", "status": "affected" }, { "version": "26.1.2.0.02", "status": "affected" }, { "version": "26.2.1_LI_Images", "status": "affected" }, { "version": "20.18.4.1.01", "status": "affected" }, { "version": "26.1.2.1_LI_Images", "status": "affected" }, { "version": "20.15.6.1_LI_Images", "status": "affected" }, { "version": "20.18.4.1_LI_Images", "status": "affected" }, { "version": "20.9.10.1.01", "status": "affected" }, { "version": "20.15.6.1.01", "status": "affected" }, { "version": "26.1.2.1.01", "status": "affected" }, { "version": "20.12.8.2.01", "status": "affected" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-76504", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "fetchedAt": "2026-10-23T02:43:50.906Z", "publishedAt": "2026-09-30T13:04:32.095Z", "modifiedAt": "2026-10-02T23:23:29.275Z", "state": "published", "provider": "cisco", "title": "Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability", "descriptions": [ { "lang": "en", "value": "A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.\r\n\r\nThis vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "20.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "19.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "18.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "20.1.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "20.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "19.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "19.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "19.2.099", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "18.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "18.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "19.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "18.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "19.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "19.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "18.4.302", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "18.4.303", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "19.2.097", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "19.2.098", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "17.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "18.3.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "19.0.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "18.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "18.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "18.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "17.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "18.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "18.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "18.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "17.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "17.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "18.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "17.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "18.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "18.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "18.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "18.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "17.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "17.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "18.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "19.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "18.4.501_ES", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "20.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "20.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "19.2.929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "19.2.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "20.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "19.2.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "20.3.2_925", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "20.3.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "20.3.2.1_927", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "18.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "20.1.2_937", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "20.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "20.3.2_928", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "20.3.2_929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "20.4.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "20.3.2.1_930", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "19.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "20.5.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "20.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "20.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "19.2.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "20.3.2_937", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "20.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "20.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "20.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "20.3.3.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "20.3.3.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "20.3.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "20.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "20.3.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "20.4.1.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "20.4.1.0.01", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "20.4.1.0.02", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "20.3.3.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "20.3.3.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "20.5.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "20.3.3.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "20.3.3.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "20.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "20.4.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "20.3.3.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "19.2.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "19.2.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "20.3.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "20.3.2.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "20.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "20.5.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "20.3.3.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "20.6.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "20.6.0.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "20.3.2.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "20.6.0.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "20.4.2.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "20.3.3.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "20.3.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "20.6.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "20.3.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "20.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "20.7.1EFT2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "20.3.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "20.3.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "20.4.2.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "20.3.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "20.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "20.6.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "20.3.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "20.5.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "20.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "20.4.2.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "20.3.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "20.3.813", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "20.3.4.0.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "20.4.2.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "20.5.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "20.3.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "20.3.814", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "20.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "20.6.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "20.3.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "20.7.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "20.3.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "20.6.2.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "20.3.4.0.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "20.6.2.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "20.4.2.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "20.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "20.6.2.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "20.4.2.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "20.3.4.0.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "20.6.2.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "20.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "20.3.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "20.4.2.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "20.7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "20.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "20.3.5.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "20.3.5.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "20.4.2.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "20.3.5.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "20.6.3.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "20.6.3.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "20.6.3.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "20.6.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "20.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "20.9.1EFT2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "20.6.3.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "20.6.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "20.6.3.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "20.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "20.9.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "20.6.3.0.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "20.6.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "20.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "20.9.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "20.6.3.0.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "20.6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "20.6.3.0.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "20.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "20.6.3.0.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "20.9.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "20.9.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "20.6.3.0.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "20.6.3.0.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "20.6.3.0.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "20.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "20.6.3.0.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "20.9.2.0.01", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "20.9.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "20.10.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "20.9.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "20.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "20.9.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "20.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "20.11.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "20.11.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "20.9.3_LI_ Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "20.6.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "20.9.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "20.6.5.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "20.9.3.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "20.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "20.6.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "20.6.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "20.6.3.0.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "20.6.3.0.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "20.3.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "20.3.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "20.9.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "20.3.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "20.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "20.3.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "20.10.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "20.6.5.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "20.3.4.0.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "20.6.2.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "20.6.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "20.11.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "20.9.3.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "20.3.4.0.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "20.6.5.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "20.6.3.0.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "20.1.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "20.9.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/206", "version": "20.6.5.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/207", "version": "20.6.5.1.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/208", "version": "20.6.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/209", "version": "20.6.3.0.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/210", "version": "20.9.3.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/211", "version": "20.6.5.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/212", "version": "20.9.3.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/213", "version": "20.6.4.0.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/214", "version": "20.6.5.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/215", "version": "20.9.3.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/216", "version": "20.6.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/217", "version": "20.3.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/218", "version": "20.6.5.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/219", "version": "20.6.5.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/220", "version": "20.9.3.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/221", "version": "20.6.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/222", "version": "20.6.5.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/223", "version": "20.9.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/224", "version": "20.11.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/225", "version": "20.6.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/226", "version": "20.10.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/227", "version": "20.6.5.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/228", "version": "20.9.3.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/229", "version": "20.6.3.0.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/230", "version": "20.6.5.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/231", "version": "20.9.3.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/232", "version": "20.6.5.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/233", "version": "20.6.4.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/234", "version": "20.9.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/235", "version": "20.6.3.0.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/236", "version": "20.6.3.0.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/237", "version": "20.9.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/238", "version": "20.9.3.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/239", "version": "20.9.3.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/240", "version": "20.9.3.0.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/241", "version": "20.9.4_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/242", "version": "20.9.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/243", "version": "20.6.5.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/244", "version": "20.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/245", "version": "20.12.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/246", "version": "20.6.5.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/247", "version": "20.9.3.0.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/248", "version": "20.6.5.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/249", "version": "20.9.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/250", "version": "20.9.4.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/251", "version": "20.9.3.0.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/252", "version": "20.9.3.0.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/253", "version": "20.6.5.1.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/254", "version": "20.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/255", "version": "20.6.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/256", "version": "20.9.3.0.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/257", "version": "20.6.3.0.51", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/258", "version": "20.9.3.0.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/259", "version": "20.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/260", "version": "20.12.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/261", "version": "20.6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/262", "version": "20.13.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/263", "version": "20.9.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/264", "version": "20.13.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/265", "version": "20.9.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/266", "version": "20.9.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/267", "version": "20.9.5_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/268", "version": "20.12.3_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/269", "version": "20.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/270", "version": "20.9.4.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/271", "version": "20.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/272", "version": "20.9.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/273", "version": "20.9.5.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/274", "version": "20.9.4.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/275", "version": "20.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/276", "version": "20.14.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/277", "version": "20.9.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/278", "version": "20.9.5.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/279", "version": "20.9.5.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/280", "version": "20.12.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/281", "version": "20.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/282", "version": "20.15.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/283", "version": "20.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/284", "version": "20.9.5.1.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/285", "version": "20.9.5.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/286", "version": "20.9.5.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/287", "version": "20.9.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/288", "version": "20.9.6_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/289", "version": "20.9.5.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/290", "version": "20.6.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/291", "version": "20.12.4.0.03", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/292", "version": "20.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/293", "version": "20.16.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/294", "version": "20.12.4_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/295", "version": "20.9.5.2.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/296", "version": "20.12.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/297", "version": "20.12.401", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/298", "version": "20.9.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/299", "version": "20.9.5.3_LI_Images", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "In September 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-177", "lang": "en", "description": "Improper Handling of URL Encoding (Hex Encoding)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU", "label": "cisco-sa-sdwan-webauth-xr8beuuU", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76504", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2_925\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.1.2_937\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.01\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.7.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.10\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.11\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.14\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.9.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.27\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.31\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.32\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.33\",\"status\":\"affected\"},{\"version\":\"20.9.2.0.01\",\"status\":\"affected\"},{\"version\":\"20.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.10.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.6.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.38\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.39\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.40\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.41\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.14\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.51\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.6.0.1\",\"status\":\"affected\"},{\"version\":\"20.13.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.6\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.14.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.13\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.14\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.03\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.16.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.16\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.12.401\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.21\",\"status\":\"affected\"},{\"version\":\"20.9.6.0.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.15.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.4_Monthly_ES5\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.7_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3_ LI _Images\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"20.12.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.12.5.1.01\",\"status\":\"affected\"},{\"version\":\"26.0.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.9.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"},{\"version\":\"26.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.2\",\"status\":\"affected\"},{\"version\":\"20.12.6.1\",\"status\":\"affected\"},{\"version\":\"20.12.6.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.3\",\"status\":\"affected\"},{\"version\":\"20.12.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2\",\"status\":\"affected\"},{\"version\":\"20.18.3\",\"status\":\"affected\"},{\"version\":\"20.18.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5\",\"status\":\"affected\"},{\"version\":\"20.15.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7\",\"status\":\"affected\"},{\"version\":\"20.12.7_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9\",\"status\":\"affected\"},{\"version\":\"20.9.9_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.2\",\"status\":\"affected\"},{\"version\":\"20.18.2.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.4\",\"status\":\"affected\"},{\"version\":\"20.12.5.4_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.1\",\"status\":\"affected\"},{\"version\":\"20.15.5.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.3\",\"status\":\"affected\"},{\"version\":\"20.15.4.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6.2\",\"status\":\"affected\"},{\"version\":\"20.15.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.4\",\"status\":\"affected\"},{\"version\":\"20.15.4.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9.1\",\"status\":\"affected\"},{\"version\":\"20.18.3.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.3.1\",\"status\":\"affected\"},{\"version\":\"26.1.1.2\",\"status\":\"affected\"},{\"version\":\"26.1.1.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.5\",\"status\":\"affected\"},{\"version\":\"20.15.4.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5.3\",\"status\":\"affected\"},{\"version\":\"20.15.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.6\",\"status\":\"affected\"},{\"version\":\"20.15.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.4_LI_Imagess\",\"status\":\"affected\"},{\"version\":\"20.18.4\",\"status\":\"affected\"},{\"version\":\"20.12.8\",\"status\":\"affected\"},{\"version\":\"20.12.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.8.1\",\"status\":\"affected\"},{\"version\":\"20.12.8.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.10_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.10\",\"status\":\"affected\"},{\"version\":\"26.1.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.2\",\"status\":\"affected\"},{\"version\":\"20.15.6.0.5_PSIRTAUG\",\"status\":\"affected\"},{\"version\":\"20.18.4.0.5_PSIRTAUG\",\"status\":\"affected\"},{\"version\":\"20.12.8.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.10.0.01\",\"status\":\"affected\"},{\"version\":\"26.1.2.0.02\",\"status\":\"affected\"},{\"version\":\"26.2.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.4.1.01\",\"status\":\"affected\"},{\"version\":\"26.1.2.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.6.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.10.1.01\",\"status\":\"affected\"},{\"version\":\"20.15.6.1.01\",\"status\":\"affected\"},{\"version\":\"26.1.2.1.01\",\"status\":\"affected\"},{\"version\":\"20.12.8.2.01\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.\r\n\r\nThis vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "In September 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Improper Handling of URL Encoding (Hex Encoding)\",\"type\":\"cwe\",\"cweId\":\"CWE-177\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "bounded", "truncatedFields": [ "/containers/cna/affected/0/versions" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-02T23:23:29.275Z", "fetchedAt": "2026-10-23T02:43:50.906Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-09-30T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Cisco Catalyst SD-WAN Managerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:28.433Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "21e0a528f61c6e6ad26a3b6f4689426adcfe4dab5a7a523468d60fd4952badca", "sourceModifiedAt": "2026-10-02T23:23:29.275Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Catalyst SD-WAN Manager の API セッションベース認証管理において、URI エンコードの不適切な処理により、特定の API エンドポイントへのアクセスを制限する認証ルールを回避できる脆弱性があります。認証されていないリモート攻撃者が細工した HTTP リクエストを送信することで、認証をバイパスし、管理者ユーザーの権限で API にアクセスできる可能性があります。", "risk": "攻撃者が管理者権限で API にアクセスできる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は Cisco Catalyst SD-WAN Manager の API セッションベース認証管理機能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるバージョンは、S4 に列挙されたすべてのバージョンです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：17.2.4。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2_925。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.1.2_937。影響ありとして記載：20.4.1。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.3.3.1。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.01。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.0.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.6.1。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.3.3.0.17。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.3.4.0.5。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.6.2。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.4.2.0.4。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.7.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.5.1.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.6.2.2.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.3.5。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.4.2.2.3。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.6.3。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.7.1.0.2。影響ありとして記載：20.8.1。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.4.2.2.8。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.7。影響ありとして記載：20.6.3.0.5。影響ありとして記載：20.6.3.0.10。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.7.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.6.3.0.11。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.3.0.14。影響ありとして記載：20.6.4。影響ありとして記載：20.9.1。影響ありとして記載：20.6.3.0.19。影響ありとして記載：20.6.3.0.18。影響ありとして記載：20.3.6。影響ありとして記載：20.9.1.1。影響ありとして記載：20.6.3.0.23。影響ありとして記載：20.6.4.0.4。影響ありとして記載：20.6.3.0.25。影響ありとして記載：20.6.5。影響ありとして記載：20.6.3.0.27。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.6.3.0.29。影響ありとして記載：20.6.3.0.31。影響ありとして記載：20.6.3.0.32。影響ありとして記載：20.10.1。影響ありとして記載：20.6.3.0.33。影響ありとして記載：20.9.2.0.01。影響ありとして記載：20.9.1_LI_Images。影響ありとして記載：20.10.1_LI_Images。影響ありとして記載：20.9.2_LI_Images。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.6.5.1。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1_LI_Images。影響ありとして記載：20.9.3_LI_ Images。影響ありとして記載：20.6.3.1.1。影響ありとして記載：20.9.3.0.2。影響ありとして記載：20.6.5.1.2。影響ありとして記載：20.9.3.0.3。影響ありとして記載：20.4.2.3。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.3.0.38。影響ありとして記載：20.6.3.0.39。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.5.2.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.11.1.1。影響ありとして記載：20.9.3.0.5。影響ありとして記載：20.3.4.0.26。影響ありとして記載：20.6.5.1.3。影響ありとして記載：20.6.3.0.40。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.2.3。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.0.41。影響ありとして記載：20.9.3.0.7。影響ありとして記載：20.6.5.1.5。影響ありとして記載：20.9.3.0.4。影響ありとして記載：20.6.4.0.19。影響ありとして記載：20.6.5.1.6。影響ありとして記載：20.9.3.0.8。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.5.5。影響ありとして記載：20.9.3.2。影響ありとして記載：20.11.1.2。影響ありとして記載：20.6.3.4。影響ありとして記載：20.10.1.2。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.4.1_LI_Images。影響ありとして記載：20.9.3.0.25。影響ありとして記載：20.9.3.0.24。影響ありとして記載：20.6.5.1.14。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.9.3.0.26。影響ありとして記載：20.6.3.0.51。影響ありとして記載：20.9.3.0.29。影響ありとして記載：20.12.2。影響ありとして記載：20.12.2_LI_Images。影響ありとして記載：20.6.6.0.1。影響ありとして記載：20.13.1_LI_Images。影響ありとして記載：20.9.4.0.4。影響ありとして記載：20.13.1。影響ありとして記載：20.9.4.1.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5_LI_Images。影響ありとして記載：20.12.3_LI_Images。影響ありとして記載：20.12.3。影響ありとして記載：20.9.4.1.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.1_LI_Images。影響ありとして記載：20.9.4.1.6。影響ありとして記載：20.14.1。影響ありとして記載：20.14.1_LI_Images。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.5.2.1。影響ありとして記載：20.9.5.2_LI_Images。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1_LI_Images。影響ありとして記載：20.15.1。影響ありとして記載：20.9.5.1.4。影響ありとして記載：20.9.5.2.7。影響ありとして記載：20.9.5.2.13。影響ありとして記載：20.9.6。影響ありとして記載：20.9.6_LI_Images。影響ありとして記載：20.9.5.2.14。影響ありとして記載：20.6.8。影響ありとして記載：20.12.4.0.03。影響ありとして記載：20.16.1。影響ありとして記載：20.16.1_LI_Images。影響ありとして記載：20.12.4_LI_Images。影響ありとして記載：20.9.5.2.16。影響ありとして記載：20.12.4.0.4。影響ありとして記載：20.12.401。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.5.3_LI_Images。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cisco Catalyst SD-WAN Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-76504", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-76504" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-76504", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-76504" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-76504", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-76504" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-76504", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76504", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.\r\n\r\nThis vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourceField": "/containers/cna/title", "excerpt": "Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76504.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2_925\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.1.2_937\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.01\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.7.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.10\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.11\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.14\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.9.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.27\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.31\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.32\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.33\",\"status\":\"affected\"},{\"version\":\"20.9.2.0.01\",\"status\":\"affected\"},{\"version\":\"20.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.10.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.6.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.38\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.39\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.40\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.41\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.14\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.51\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.6.0.1\",\"status\":\"affected\"},{\"version\":\"20.13.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.6\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.14.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.13\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.14\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.03\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.16.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.16\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.12.401\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.21\",\"status\":\"affected\"},{\"version\":\"20.9.6.0.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.15.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.4_Monthly_ES5\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.7_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3_ LI _Images\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"20.12.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.12.5.1.01\",\"status\":\"affected\"},{\"version\":\"26.0.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.9.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"},{\"version\":\"26.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.2\",\"status\":\"affected\"},{\"version\":\"20.12.6.1\",\"status\":\"affected\"},{\"version\":\"20.12.6.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.3\",\"status\":\"affected\"},{\"version\":\"20.12.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2\",\"status\":\"affected\"},{\"version\":\"20.18.3\",\"status\":\"affected\"},{\"version\":\"20.18.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5\",\"status\":\"affected\"},{\"version\":\"20.15.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7\",\"status\":\"affected\"},{\"version\":\"20.12.7_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9\",\"status\":\"affected\"},{\"version\":\"20.9", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-76504\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-76504（Cisco Catalyst SD-WAN Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Cisco Catalyst SD-WAN Manager の API セッションベース認証管理機能です。\n・影響を受けるバージョンは、S4 に列挙されたすべてのバージョンです。\n・公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：17.2.4。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2_925。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.1.2_937。影響ありとして記載：20.4.1。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.3.3.1。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.01。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.0.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.6.1。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.3.3.0.17。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.3.4.0.5。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.6.2。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.4.2.0.4。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.7.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.5.1.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.6.2.2.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.3.5。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.4.2.2.3。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.6.3。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.7.1.0.2。影響ありとして記載：20.8.1。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.4.2.2.8。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.7。影響ありとして記載：20.6.3.0.5。影響ありとして記載：20.6.3.0.10。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.7.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.6.3.0.11。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.3.0.14。影響ありとして記載：20.6.4。影響ありとして記載：20.9.1。影響ありとして記載：20.6.3.0.19。影響ありとして記載：20.6.3.0.18。影響ありとして記載：20.3.6。影響ありとして記載：20.9.1.1。影響ありとして記載：20.6.3.0.23。影響ありとして記載：20.6.4.0.4。影響ありとして記載：20.6.3.0.25。影響ありとして記載：20.6.5。影響ありとして記載：20.6.3.0.27。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.6.3.0.29。影響ありとして記載：20.6.3.0.31。影響ありとして記載：20.6.3.0.32。影響ありとして記載：20.10.1。影響ありとして記載：20.6.3.0.33。影響ありとして記載：20.9.2.0.01。影響ありとして記載：20.9.1_LI_Images。影響ありとして記載：20.10.1_LI_Images。影響ありとして記載：20.9.2_LI_Images。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.6.5.1。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1_LI_Images。影響ありとして記載：20.9.3_LI_ Images。影響ありとして記載：20.6.3.1.1。影響ありとして記載：20.9.3.0.2。影響ありとして記載：20.6.5.1.2。影響ありとして記載：20.9.3.0.3。影響ありとして記載：20.4.2.3。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.3.0.38。影響ありとして記載：20.6.3.0.39。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.5.2.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.11.1.1。影響ありとして記載：20.9.3.0.5。影響ありとして記載：20.3.4.0.26。影響ありとして記載：20.6.5.1.3。影響ありとして記載：20.6.3.0.40。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.2.3。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.0.41。影響ありとして記載：20.9.3.0.7。影響ありとして記載：20.6.5.1.5。影響ありとして記載：20.9.3.0.4。影響ありとして記載：20.6.4.0.19。影響ありとして記載：20.6.5.1.6。影響ありとして記載：20.9.3.0.8。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.5.5。影響ありとして記載：20.9.3.2。影響ありとして記載：20.11.1.2。影響ありとして記載：20.6.3.4。影響ありとして記載：20.10.1.2。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.4.1_LI_Images。影響ありとして記載：20.9.3.0.25。影響ありとして記載：20.9.3.0.24。影響ありとして記載：20.6.5.1.14。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.9.3.0.26。影響ありとして記載：20.6.3.0.51。影響ありとして記載：20.9.3.0.29。影響ありとして記載：20.12.2。影響ありとして記載：20.12.2_LI_Images。影響ありとして記載：20.6.6.0.1。影響ありとして記載：20.13.1_LI_Images。影響ありとして記載：20.9.4.0.4。影響ありとして記載：20.13.1。影響ありとして記載：20.9.4.1.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5_LI_Images。影響ありとして記載：20.12.3_LI_Images。影響ありとして記載：20.12.3。影響ありとして記載：20.9.4.1.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.1_LI_Images。影響ありとして記載：20.9.4.1.6。影響ありとして記載：20.14.1。影響ありとして記載：20.14.1_LI_Images。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.5.2.1。影響ありとして記載：20.9.5.2_LI_Images。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1_LI_Images。影響ありとして記載：20.15.1。影響ありとして記載：20.9.5.1.4。影響ありとして記載：20.9.5.2.7。影響ありとして記載：20.9.5.2.13。影響ありとして記載：20.9.6。影響ありとして記載：20.9.6_LI_Images。影響ありとして記載：20.9.5.2.14。影響ありとして記載：20.6.8。影響ありとして記載：20.12.4.0.03。影響ありとして記載：20.16.1。影響ありとして記載：20.16.1_LI_Images。影響ありとして記載：20.12.4_LI_Images。影響ありとして記載：20.9.5.2.16。影響ありとして記載：20.12.4.0.4。影響ありとして記載：20.12.401。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.5.3_LI_Images。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-76504", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:28.433Z", "lastSuccess": "2026-10-23T03:21:28.433Z", "sourceCheckedAt": "2026-10-23T02:43:50.906Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-86950", "aliases": [], "title": "iOS and iPadOS / macOS：コード実行", "summary": "境界チェックを強化したことで、範囲外書き込みの問題が修正されました。この問題は iOS 26.7.1、iPadOS 26.7.1、macOS Sequoia 15.8.1、macOS Tahoe 26.7.1 で修正されています。悪意のあるファイルを処理すると任意コード実行につながる可能性があり、Apple は iOS 27 未満のバージョンで特定の標的個人に対する極めて高度な攻撃でこの問題が悪用されたという報告を受けています。", "risk": "悪意のあるファイルを処理されると、サーバーや機器に攻撃者の命令を実行させられる任意コード実行が起こる可能性があります。", "product": "iOS and iPadOS / macOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "iOS and iPadOS", "range": "< 26.7.1" }, { "product": "macOS", "range": "< 15.8.1" }, { "product": "macOS", "range": "< 26.7.1" } ], "fixed": [], "steps": [ "この問題は iOS 26.7.1、iPadOS 26.7.1、macOS Sequoia 15.8.1、macOS Tahoe 26.7.1 で修正されています。", "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86950", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-86950", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/149226", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/149228", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/149229", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-09-28T19:13:52.603Z", "modifiedAt": "2026-10-01T17:15:57.969Z", "fetchedAt": "2026-10-23T02:43:51.610Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "26.7.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "15.8.1", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "26.7.1", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-86950", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "fetchedAt": "2026-10-23T02:43:51.610Z", "publishedAt": "2026-09-28T19:13:52.603Z", "modifiedAt": "2026-10-01T17:15:57.969Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "26.7.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "15.8.1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "0", "lessThan": "26.7.1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/149226", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/0" }, { "url": "https://support.apple.com/en-us/149228", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/1" }, { "url": "https://support.apple.com/en-us/149229", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://seclists.org/fulldisclosure/2026/Sep/89", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "http://seclists.org/fulldisclosure/2026/Sep/90", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "http://seclists.org/fulldisclosure/2026/Sep/91", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.7.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.8.1\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.7.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-01T17:15:57.969Z", "fetchedAt": "2026-10-23T02:43:51.610Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-09-29T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "iOS and iPadOS / macOSにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:29.526Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "98306e45a0a344ca46c7eb925909f2d079a77f045376361a0a4d9532a18b5c38", "sourceModifiedAt": "2026-10-01T17:15:57.969Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "境界チェックを強化したことで、範囲外書き込みの問題が修正されました。この問題は iOS 26.7.1、iPadOS 26.7.1、macOS Sequoia 15.8.1、macOS Tahoe 26.7.1 で修正されています。悪意のあるファイルを処理すると任意コード実行につながる可能性があり、Apple は iOS 27 未満のバージョンで特定の標的個人に対する極めて高度な攻撃でこの問題が悪用されたという報告を受けています。", "risk": "悪意のあるファイルを処理されると、サーバーや機器に攻撃者の命令を実行させられる任意コード実行が起こる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "iOS および iPadOS のバージョンが 26.7.1 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E3" ] }, { "text": "macOS のバージョンが 15.8.1 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E4" ] }, { "text": "macOS のバージョンが 26.7.1 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E4" ] }, { "text": "悪意のあるファイルを処理すると任意コード実行につながる可能性があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E1" ] }, { "text": "iOS 27 未満のバージョンで、特定の標的個人に対する極めて高度な攻撃でこの問題が悪用されたとの報告があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：26.7.1未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：15.8.1未満の版。影響ありとして記載：26.7.1未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86950" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E3" ] }, { "text": "「iOS and iPadOS / macOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-86950", "https://support.apple.com/en-us/149226", "https://support.apple.com/en-us/149228", "https://support.apple.com/en-us/149229", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86950", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "actions": [ { "text": "この問題は iOS 26.7.1、iPadOS 26.7.1、macOS Sequoia 15.8.1、macOS Tahoe 26.7.1 で修正されています。", "kind": "fix", "evidenceIds": [ "E1", "E2" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ] }, { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-86950", "https://support.apple.com/en-us/149226", "https://support.apple.com/en-us/149228", "https://support.apple.com/en-us/149229", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86950", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-86950", "https://support.apple.com/en-us/149226", "https://support.apple.com/en-us/149228", "https://support.apple.com/en-us/149229", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86950", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86950", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-86950", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/149226", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/149228", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/149229", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.7.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86950.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.8.1\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.7.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86950", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-86950\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-86950（iOS and iPadOS / macOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・iOS および iPadOS のバージョンが 26.7.1 未満は影響を受けます。\n・macOS のバージョンが 15.8.1 未満は影響を受けます。\n・macOS のバージョンが 26.7.1 未満は影響を受けます。\n・悪意のあるファイルを処理すると任意コード実行につながる可能性があります。\n・iOS 27 未満のバージョンで、特定の標的個人に対する極めて高度な攻撃でこの問題が悪用されたとの報告があります。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：26.7.1未満の版。\n・公式の対象表：Apple / macOS。影響ありとして記載：15.8.1未満の版。影響ありとして記載：26.7.1未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-86950", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:29.526Z", "lastSuccess": "2026-10-23T03:21:29.526Z", "sourceCheckedAt": "2026-10-23T02:43:51.610Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-88771", "aliases": [], "title": "ADC / Gateway：コード実行", "summary": "不適切な入力検証により、認証されていない攻撃者が任意のコマンドを実行できるリモートコード実行脆弱性が、Citrix NetScaler ADC および Citrix NetScaler Gateway に存在します。", "risk": "攻撃者が任意のコマンドを実行できるため、サーバーや機器が制御される可能性があります。", "product": "ADC / Gateway", "category": "other", "component": "package", "severity": "critical", "cvss": 9.5, "cvssVersion": "4.0", "cvssSource": "NetScaler", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "ADC", "range": "< 14.1-73.37" }, { "product": "ADC", "range": "< 13.1-64.23" }, { "product": "ADC", "range": "< 14.1-73.37 FIPS" }, { "product": "ADC", "range": "< 13.1.37.279 FIPS and NDcPP" }, { "product": "Gateway", "range": "< 14.1-73.37" }, { "product": "Gateway", "range": "< 13.1-64.23" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-88771", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "label": "CISAが示す関連情報" }, { "url": "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "label": "CISAが示す関連情報" }, { "url": "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-09-27T16:02:07.001Z", "modifiedAt": "2026-09-29T03:55:15.090Z", "fetchedAt": "2026-10-23T02:43:51.804Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.", "sourceTitle": "A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Citrix NetScaler", "product": "ADC", "versions": [ { "status": "affected", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "14.1-73.37 FIPS", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "13.1.37.279 FIPS and NDcPP", "versionType": "patch" } ], "defaultStatus": "unaffected" }, { "vendor": "Citrix NetScaler", "product": "Gateway", "versions": [ { "status": "affected", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-88771", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "fetchedAt": "2026-10-23T02:43:51.804Z", "publishedAt": "2026-09-27T16:02:07.001Z", "modifiedAt": "2026-09-29T03:55:15.090Z", "state": "published", "provider": "NetScaler", "title": "A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands", "descriptions": [ { "lang": "en", "value": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Citrix NetScaler", "product": "ADC", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "14.1-73.37 FIPS", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0", "lessThan": "13.1.37.279 FIPS and NDcPP", "versionType": "patch", "status": "affected" } ] }, { "vendor": "Citrix NetScaler", "product": "Gateway", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper input validation", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.5, "baseSeverity": "CRITICAL", "provider": "NetScaler", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "label": "NetScaler", "tags": [], "provider": "NetScaler", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37 FIPS\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1.37.279 FIPS and NDcPP\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper input validation\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.5,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-29T03:55:15.090Z", "fetchedAt": "2026-10-23T02:43:51.804Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-09-27T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "ADC / Gatewayにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:31.066Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "49d3205de5a3d8c9d3815a771f49adafdee5734a58a3713336d83293f471cb3a", "sourceModifiedAt": "2026-09-29T03:55:15.090Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "不適切な入力検証により、認証されていない攻撃者が任意のコマンドを実行できるリモートコード実行脆弱性が、Citrix NetScaler ADC および Citrix NetScaler Gateway に存在します。", "risk": "攻撃者が任意のコマンドを実行できるため、サーバーや機器が制御される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Citrix NetScaler ADC はバージョン 14.1-73.37 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "Citrix NetScaler ADC はバージョン 13.1-64.23 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "Citrix NetScaler ADC の FIPS モードはバージョン 14.1-73.37 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "Citrix NetScaler ADC の FIPS および NDcPP モードはバージョン 13.1.37.279 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "Citrix NetScaler Gateway はバージョン 14.1-73.37 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "Citrix NetScaler Gateway はバージョン 13.1-64.23 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Citrix NetScaler / ADC。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。影響ありとして記載：14.1-73.37 FIPS未満の版。影響ありとして記載：13.1.37.279 FIPS and NDcPP未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Citrix NetScaler / Gateway。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ADC / Gateway」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-88771", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771", "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-88771", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771", "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-88771", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771", "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-88771", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "label": "CISAが示す関連情報" }, { "url": "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "label": "CISAが示す関連情報" }, { "url": "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourceField": "/containers/cna/title", "excerpt": "A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37 FIPS\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1.37.279 FIPS and NDcPP\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88771.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-88771\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-88771（ADC / Gateway）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Citrix NetScaler ADC はバージョン 14.1-73.37 未満で影響を受けます。\n・Citrix NetScaler ADC はバージョン 13.1-64.23 未満で影響を受けます。\n・Citrix NetScaler ADC の FIPS モードはバージョン 14.1-73.37 未満で影響を受けます。\n・Citrix NetScaler ADC の FIPS および NDcPP モードはバージョン 13.1.37.279 未満で影響を受けます。\n・Citrix NetScaler Gateway はバージョン 14.1-73.37 未満で影響を受けます。\n・Citrix NetScaler Gateway はバージョン 13.1-64.23 未満で影響を受けます。\n・公式の対象表：Citrix NetScaler / ADC。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。影響ありとして記載：14.1-73.37 FIPS未満の版。影響ありとして記載：13.1.37.279 FIPS and NDcPP未満の版。\n・公式の対象表：Citrix NetScaler / Gateway。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-88771", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:31.066Z", "lastSuccess": "2026-10-23T03:21:31.066Z", "sourceCheckedAt": "2026-10-23T02:43:51.804Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-88772", "aliases": [], "title": "ADC / Gateway：コード実行", "summary": "Citrix NetScaler ADC と Citrix NetScaler Gateway における脆弱性です。ADC はバージョン 14.1-73.37 未満、13.1-64.23 未満、14.1-73.37 FIPS 未満、13.1.37.279 FIPS および NDcPP 未満、Gateway はバージョン 14.1-73.37 未満、13.1-64.23 未満で、リモートコード実行またはサービス拒否を引き起こす可能性があります。", "risk": "攻撃者がリモートコード実行やサービス拒否を引き起こす可能性があります。", "product": "ADC / Gateway", "category": "other", "component": "package", "severity": "critical", "cvss": 9.5, "cvssVersion": "4.0", "cvssSource": "NetScaler", "cvssVector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "ADC", "range": "< 14.1-73.37" }, { "product": "ADC", "range": "< 13.1-64.23" }, { "product": "ADC", "range": "< 14.1-73.37 FIPS" }, { "product": "ADC", "range": "< 13.1.37.279 FIPS and NDcPP" }, { "product": "Gateway", "range": "< 14.1-73.37" }, { "product": "Gateway", "range": "< 13.1-64.23" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-88772", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778", "label": "CVE掲載の参考情報" }, { "url": "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "label": "CISAが示す関連情報" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "label": "CISAが示す関連情報" }, { "url": "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-09-27T16:09:56.033Z", "modifiedAt": "2026-09-28T03:55:42.777Z", "fetchedAt": "2026-10-23T02:43:51.845Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service", "sourceTitle": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Citrix NetScaler", "product": "ADC", "versions": [ { "status": "affected", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "14.1-73.37 FIPS", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "13.1.37.279 FIPS and NDcPP", "versionType": "patch" } ], "defaultStatus": "unaffected" }, { "vendor": "Citrix NetScaler", "product": "Gateway", "versions": [ { "status": "affected", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch" }, { "status": "affected", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-88772", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "fetchedAt": "2026-10-23T02:43:51.845Z", "publishedAt": "2026-09-27T16:09:56.033Z", "modifiedAt": "2026-09-28T03:55:42.777Z", "state": "published", "provider": "NetScaler", "title": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service", "descriptions": [ { "lang": "en", "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Citrix NetScaler", "product": "ADC", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "14.1-73.37 FIPS", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0", "lessThan": "13.1.37.279 FIPS and NDcPP", "versionType": "patch", "status": "affected" } ] }, { "vendor": "Citrix NetScaler", "product": "Gateway", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "14.1-73.37", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "0", "lessThan": "13.1-64.23", "versionType": "patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.5, "baseSeverity": "CRITICAL", "provider": "NetScaler", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778", "label": "NetScaler", "tags": [], "provider": "NetScaler", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37 FIPS\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1.37.279 FIPS and NDcPP\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.5,\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-28T03:55:42.777Z", "fetchedAt": "2026-10-23T02:43:51.845Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-09-27T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "ADC / Gatewayにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:21:35.862Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c965430d346e1f7abea6f5254062934ef3f0219b13683907a43b7912ec0614b9", "sourceModifiedAt": "2026-09-28T03:55:42.777Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Citrix NetScaler ADC と Citrix NetScaler Gateway における脆弱性です。ADC はバージョン 14.1-73.37 未満、13.1-64.23 未満、14.1-73.37 FIPS 未満、13.1.37.279 FIPS および NDcPP 未満、Gateway はバージョン 14.1-73.37 未満、13.1-64.23 未満で、リモートコード実行またはサービス拒否を引き起こす可能性があります。", "risk": "攻撃者がリモートコード実行やサービス拒否を引き起こす可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Citrix NetScaler ADC がバージョン 14.1-73.37 未満の場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Citrix NetScaler ADC がバージョン 13.1-64.23 未満の場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Citrix NetScaler ADC がバージョン 14.1-73.37 FIPS 未満の場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Citrix NetScaler ADC がバージョン 13.1.37.279 FIPS および NDcPP 未満の場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Citrix NetScaler Gateway がバージョン 14.1-73.37 未満の場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Citrix NetScaler Gateway がバージョン 13.1-64.23 未満の場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "公式の対象表：Citrix NetScaler / ADC。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。影響ありとして記載：14.1-73.37 FIPS未満の版。影響ありとして記載：13.1.37.279 FIPS and NDcPP未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Citrix NetScaler / Gateway。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ADC / Gateway」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-88772", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772", "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-88772", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772", "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-88772", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772", "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-88772", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778", "label": "CVE掲載の参考情報" }, { "url": "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778", "label": "CISAが示す関連情報" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "label": "CISAが示す関連情報" }, { "url": "https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourceField": "/containers/cna/title", "excerpt": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37 FIPS\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1.37.279 FIPS and NDcPP\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88772.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Citrix NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"14.1-73.37\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"13.1-64.23\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-88772\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-88772（ADC / Gateway）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Citrix NetScaler ADC がバージョン 14.1-73.37 未満の場合に影響を受けます。\n・Citrix NetScaler ADC がバージョン 13.1-64.23 未満の場合に影響を受けます。\n・Citrix NetScaler ADC がバージョン 14.1-73.37 FIPS 未満の場合に影響を受けます。\n・Citrix NetScaler ADC がバージョン 13.1.37.279 FIPS および NDcPP 未満の場合に影響を受けます。\n・Citrix NetScaler Gateway がバージョン 14.1-73.37 未満の場合に影響を受けます。\n・Citrix NetScaler Gateway がバージョン 13.1-64.23 未満の場合に影響を受けます。\n・公式の対象表：Citrix NetScaler / ADC。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。影響ありとして記載：14.1-73.37 FIPS未満の版。影響ありとして記載：13.1.37.279 FIPS and NDcPP未満の版。\n・公式の対象表：Citrix NetScaler / Gateway。影響ありとして記載：14.1-73.37未満の版。影響ありとして記載：13.1-64.23未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-88772", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:21:35.862Z", "lastSuccess": "2026-10-23T03:21:35.862Z", "sourceCheckedAt": "2026-10-23T02:43:51.845Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" }, { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } } ], "total": 2185, "limit": 20, "offset": 340, "filters": { "product": "all", "type": "all", "q": "", "page": 18 }, "pagination": { "page": 18, "pageSize": 20, "totalPages": 110 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T09:17:50.143Z", "lastAttempt": "2026-10-23T09:17:50.143Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-23T09:17:50.143Z", "lastAttempt": "2026-10-23T09:17:50.143Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T09:17:50.143Z", "lastAttempt": "2026-10-23T09:17:50.143Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-23T09:17:50.143Z", "lastAttempt": "2026-10-23T09:17:50.143Z", "error": null, "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T08:02:50.076Z 〜 2026-10-23T09:17:50.143Z、全製品の変更 45/45件まで確認、対象0件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T09:17:50.143Z", "lastAttempt": "2026-10-23T09:17:50.143Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }