{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2019-1068", "aliases": [], "title": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) / Microsoft SQL Server / Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) / Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR) / Microsoft SQL Ser：コード実行", "summary": "Microsoft SQL Server が内部関数の処理を誤って扱うため、リモートからコードを実行できる脆弱性が存在します。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) / Microsoft SQL Server / Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) / Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR) / Microsoft SQL Ser", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)", "range": "unspecified" }, { "product": "Microsoft SQL Server", "range": "2014 Service Pack 2 for 32-bit Systems (CU)" }, { "product": "Microsoft SQL Server", "range": "2014 Service Pack 2 for x64-based Systems (CU)" }, { "product": "Microsoft SQL Server", "range": "2016 for x64-based Systems Service Pack 1 (CU)" }, { "product": "Microsoft SQL Server", "range": "2017 for x64-based Systems (CU)" }, { "product": "Microsoft SQL Server", "range": "2016 for x64-based Systems Service Pack 2 (CU)" }, { "product": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)", "range": "unspecified" }, { "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)", "range": "unspecified" }, { "product": "Microsoft SQL Server 2017 for x64-based Systems (GDR)", "range": "unspecified" }, { "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)", "range": "unspecified" }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)", "range": "unspecified" }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)", "range": "unspecified" }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)", "range": "unspecified" }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)", "range": "unspecified" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-1068", "label": "CVE公式レコード" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1068", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2019-07-15T18:56:20.000Z", "modifiedAt": "2026-08-27T03:57:25.483Z", "fetchedAt": "2026-10-23T02:43:06.605Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "2014 Service Pack 2 for 32-bit Systems (CU)" }, { "status": "affected", "version": "2014 Service Pack 2 for x64-based Systems (CU)" }, { "status": "affected", "version": "2016 for x64-based Systems Service Pack 1 (CU)" }, { "status": "affected", "version": "2017 for x64-based Systems (CU)" }, { "status": "affected", "version": "2016 for x64-based Systems Service Pack 2 (CU)" } ] }, { "product": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server 2017 for x64-based Systems (GDR)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] }, { "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)", "vendor": "Microsoft", "versions": [ { "status": "affected", "version": "unspecified" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2019-1068", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "fetchedAt": "2026-10-23T02:43:06.605Z", "publishedAt": "2019-07-15T18:56:20.000Z", "modifiedAt": "2026-08-27T03:57:25.483Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "2014 Service Pack 2 for 32-bit Systems (CU)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "2014 Service Pack 2 for x64-based Systems (CU)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "2016 for x64-based Systems Service Pack 1 (CU)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "2017 for x64-based Systems (CU)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "2016 for x64-based Systems Service Pack 2 (CU)", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 for x64-based Systems (GDR)", "sourcePath": "/containers/cna/affected/4", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)", "sourcePath": "/containers/cna/affected/5", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)", "sourcePath": "/containers/cna/affected/6", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)", "sourcePath": "/containers/cna/affected/7", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)", "sourcePath": "/containers/cna/affected/8", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "unspecified", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)", "sourcePath": "/containers/cna/affected/9", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "unspecified", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Remote Code Execution", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1068", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"product\":\"Microsoft SQL Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2014 Service Pack 2 for 32-bit Systems (CU)\"},{\"status\":\"affected\",\"version\":\"2014 Service Pack 2 for x64-based Systems (CU)\"},{\"status\":\"affected\",\"version\":\"2016 for x64-based Systems Service Pack 1 (CU)\"},{\"status\":\"affected\",\"version\":\"2017 for x64-based Systems (CU)\"},{\"status\":\"affected\",\"version\":\"2016 for x64-based Systems Service Pack 2 (CU)\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"product\":\"Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"product\":\"Microsoft SQL Server 2017 for x64-based Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"product\":\"Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-27T03:57:25.483Z", "fetchedAt": "2026-10-23T02:43:06.605Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-26T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) / Microsoft SQL Server / Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) / Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR) / Microsoft SQL Serにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:20.210Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2e448441e62cb01b9033e30f0e8a8ef9da843bbfa2935a5fc9a5dafc1d80fd09", "sourceModifiedAt": "2026-08-27T03:57:25.483Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft SQL Server が内部関数の処理を誤って扱うため、リモートからコードを実行できる脆弱性が存在します。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E2" ] }, { "text": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (CU) が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E3" ] }, { "text": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (CU) が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E3" ] }, { "text": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (CU) が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E3" ] }, { "text": "Microsoft SQL Server 2017 for x64-based Systems (CU) が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E3" ] }, { "text": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU) が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E3" ] }, { "text": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E4" ] }, { "text": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E5" ] }, { "text": "Microsoft SQL Server 2017 for x64-based Systems (GDR) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E6" ] }, { "text": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E7" ] }, { "text": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E8" ] }, { "text": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E9" ] }, { "text": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E10" ] }, { "text": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) が影響を受けます（バージョンは未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server。影響ありとして記載：2017 for x64-based Systems (CU)。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2017 for x64-based Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E11" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068" ], "evidenceIds": [ "E12" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) / Microsoft SQL Server / Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) / Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR) / Microsoft SQL Ser」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-1068", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2019-1068" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2019-1068", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2019-1068" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-1068", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2019-1068" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-1068", "label": "CVE公式レコード" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1068", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"product\":\"Microsoft SQL Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2014 Service Pack 2 for 32-bit Systems (CU)\"},{\"status\":\"affected\",\"version\":\"2014 Service Pack 2 for x64-based Systems (CU)\"},{\"status\":\"affected\",\"version\":\"2016 for x64-based Systems Service Pack 1 (CU)\"},{\"status\":\"affected\",\"version\":\"2017 for x64-based Systems (CU)\"},{\"status\":\"affected\",\"version\":\"2016 for x64-based Systems Service Pack 2 (CU)\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"product\":\"Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"product\":\"Microsoft SQL Server 2017 for x64-based Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"product\":\"Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1068.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"product\":\"Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2019-1068\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2019-1068（Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) / Microsoft SQL Server / Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) / Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR) / Microsoft SQL Ser）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (CU) が影響を受けます。\n・Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (CU) が影響を受けます。\n・Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (CU) が影響を受けます。\n・Microsoft SQL Server 2017 for x64-based Systems (CU) が影響を受けます。\n・Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU) が影響を受けます。\n・Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2017 for x64-based Systems (GDR) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR) が影響を受けます（バージョンは未指定）。\n・Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) が影響を受けます（バージョンは未指定）。\n・公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server。影響ありとして記載：2017 for x64-based Systems (CU)。\n・公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server 2017 for x64-based Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-1068", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:20.210Z", "lastSuccess": "2026-10-23T03:22:20.210Z", "sourceCheckedAt": "2026-10-23T02:43:06.605Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" }, { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2021-23758", "aliases": [], "title": "AjaxPro.2：コード実行", "summary": "AjaxPro.2 のすべてのバージョンは、信頼できないデータの逆シリアル化が可能であり、任意の .NET クラスを逆シリアル化できるため、リモートコード実行が可能になる脆弱性が存在します。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で攻撃者のコードを実行させられる可能性があります。", "product": "AjaxPro.2", "category": "other", "component": "package", "severity": "high", "cvss": 8.1, "cvssVersion": "3.1", "cvssSource": "snyk", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "AjaxPro.2", "range": "< unspecified" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "label": "CVE：snyk" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-23758", "label": "CVE公式レコード" }, { "url": "https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57", "label": "CISAが示す関連情報" }, { "url": "http://packetstormsecurity.com/files/175677/AjaxPro-Deserialization-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23758", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2021-12-03T20:05:12.932Z", "modifiedAt": "2026-08-27T03:56:43.403Z", "fetchedAt": "2026-10-23T02:43:15.508Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.", "sourceTitle": "Deserialization of Untrusted Data", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "AjaxPro.2", "versions": [ { "version": "0", "status": "affected", "lessThan": "unspecified", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2021-23758", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "fetchedAt": "2026-10-23T02:43:15.508Z", "publishedAt": "2021-12-03T20:05:12.932Z", "modifiedAt": "2026-08-27T03:56:43.403Z", "state": "published", "provider": "snyk", "title": "Deserialization of Untrusted Data", "descriptions": [ { "lang": "en", "value": "All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "AjaxPro.2", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "unspecified", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "provider": "snyk", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://packetstormsecurity.com/files/175677/AjaxPro-Deserialization-Remote-Code-Execution.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-23758", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"AjaxPro.2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"unspecified\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"Deserialization of Untrusted Data\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-27T03:56:43.403Z", "fetchedAt": "2026-10-23T02:43:15.508Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-26T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "AjaxPro.2にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:20.651Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ad02be38ab13c8713d744794a715f11fd2298b145613e99619326af5081e95ec", "sourceModifiedAt": "2026-08-27T03:56:43.403Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "AjaxPro.2 のすべてのバージョンは、信頼できないデータの逆シリアル化が可能であり、任意の .NET クラスを逆シリアル化できるため、リモートコード実行が可能になる脆弱性が存在します。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で攻撃者のコードを実行させられる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "AjaxPro.2 のすべてのバージョンが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：AjaxPro.2。影響ありとして記載：unspecified未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json" ], "evidenceIds": [ "E3" ] }, { "text": "「AjaxPro.2」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-23758", "https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971", "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57", "http://packetstormsecurity.com/files/175677/AjaxPro-Deserialization-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2021-23758" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2021-23758", "https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971", "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57", "http://packetstormsecurity.com/files/175677/AjaxPro-Deserialization-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2021-23758" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-23758", "https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971", "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57", "http://packetstormsecurity.com/files/175677/AjaxPro-Deserialization-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2021-23758" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "label": "CVE：snyk" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-23758", "label": "CVE公式レコード" }, { "url": "https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57", "label": "CISAが示す関連情報" }, { "url": "http://packetstormsecurity.com/files/175677/AjaxPro-Deserialization-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23758", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "sourceField": "/containers/cna/title", "excerpt": "Deserialization of Untrusted Data", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/23xxx/CVE-2021-23758.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"AjaxPro.2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"unspecified\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2021-23758\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2021-23758（AjaxPro.2）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・AjaxPro.2 のすべてのバージョンが影響を受けます。\n・公式の対象表：AjaxPro.2。影響ありとして記載：unspecified未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-23758", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:20.651Z", "lastSuccess": "2026-10-23T03:22:20.651Z", "sourceCheckedAt": "2026-10-23T02:43:15.508Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2022-0995", "aliases": [], "title": "kernel：サービス停止", "summary": "Linuxカーネルの watch_queue イベント通知サブシステムにおいて、範囲外メモリ書き込みの欠陥が見つかりました。この欠陥によりカーネルの状態の一部が上書きされ、ローカルユーザーが特権アクセスを取得したり、システムでサービス拒否が発生する可能性があります。", "risk": "ローカルユーザーが特権アクセスを取得できる、またはシステムでサービス拒否が発生する可能性がある。", "product": "kernel", "category": "linux", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "redhat", "cvssVector": null, "affected": [ { "product": "kernel", "range": "kernel 5.17 rc8" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0995", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-0995", "label": "CVE公式レコード" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2063786", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb", "label": "CISAが示す関連情報" }, { "url": "http://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bounds-Write.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20220429-0001/", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0995", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2022-03-25T18:03:08.000Z", "modifiedAt": "2026-08-27T03:56:36.327Z", "fetchedAt": "2026-10-23T02:43:20.405Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "kernel", "vendor": "n/a", "versions": [ { "status": "affected", "version": "kernel 5.17 rc8" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-0995", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "fetchedAt": "2026-10-23T02:43:20.405Z", "publishedAt": "2022-03-25T18:03:08.000Z", "modifiedAt": "2026-08-27T03:56:36.327Z", "state": "published", "provider": "redhat", "title": "", "descriptions": [ { "lang": "en", "value": "An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "kernel", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "kernel 5.17 rc8", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-787", "lang": "en", "description": "CWE-787", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2063786", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bounds-Write.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://security.netapp.com/advisory/ntap-20220429-0001/", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0995", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"kernel\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"kernel 5.17 rc8\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-787\",\"description\":\"CWE-787\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-27T03:56:36.327Z", "fetchedAt": "2026-10-23T02:43:20.405Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-26T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "kernelにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:21.869Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c00c3223d1d8bd7904d1301be85fc2e1fc71d354e2082e3e2fbe2b57412f8f4f", "sourceModifiedAt": "2026-08-27T03:56:36.327Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Linuxカーネルの watch_queue イベント通知サブシステムにおいて、範囲外メモリ書き込みの欠陥が見つかりました。この欠陥によりカーネルの状態の一部が上書きされ、ローカルユーザーが特権アクセスを取得したり、システムでサービス拒否が発生する可能性があります。", "risk": "ローカルユーザーが特権アクセスを取得できる、またはシステムでサービス拒否が発生する可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "この欠陥は Linux カーネルの watch_queue イベント通知サブシステムに存在する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json" ], "evidenceIds": [ "E1" ] }, { "text": "ローカルユーザーがこの欠陥を利用できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json" ], "evidenceIds": [ "E1" ] }, { "text": "kernel 5.17 rc8 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：kernel。影響ありとして記載：kernel 5.17 rc8。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0995" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json" ], "evidenceIds": [ "E2" ] }, { "text": "管理担当者に、Linuxの種類（Ubuntu、Red Hatなど）と版、対象パッケージ名、配布元を含む完全なパッケージ番号を確認してもらいます。OSの種類や製品の上流の番号だけで、影響の有無を決めないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "更新が用意されていない場合は、配布元や保守会社へCVE番号とパッケージ番号を送り、影響の有無・回避策・提供予定を確認します。他のLinux向けの修正をそのまま入れないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json" ], "evidenceIds": [ "E2" ] }, { "text": "修正後の完全なパッケージ番号と、その配布元のCVE対応表を照合します。古い番号のまま修正を取り込む場合があるため、数字が小さいという理由だけで未修正とは扱いません。管理者に必要な再起動の完了も確認してもらってください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0995", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-0995", "label": "CVE公式レコード" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2063786", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb", "label": "CISAが示す関連情報" }, { "url": "http://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bounds-Write.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20220429-0001/", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0995", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0995.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"kernel\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"kernel 5.17 rc8\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0995", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-0995\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-0995（kernel）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・この欠陥は Linux カーネルの watch_queue イベント通知サブシステムに存在する。\n・ローカルユーザーがこの欠陥を利用できる。\n・kernel 5.17 rc8 が影響を受ける。\n・公式の対象表：kernel。影響ありとして記載：kernel 5.17 rc8。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-0995", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:21.869Z", "lastSuccess": "2026-10-23T03:22:21.869Z", "sourceCheckedAt": "2026-10-23T02:43:20.405Z", "errorCode": null }, "glossary": [ { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-8452", "aliases": [], "title": "ADC / Gateway：サービス停止", "summary": "NetScaler ADC および NetScaler Gateway におけるメモリオーバーフローの脆弱性で、機器が Gateway（SSL VPN、ICA Proxy、CVPN、RDP Proxy）または AAA 仮想サーバとして設定されている場合に、予測不能または誤った動作やサービス拒否（DoS）を引き起こす可能性があります。", "risk": "予測不能または誤った動作が発生し、サービス拒否（DoS）になる可能性があります。", "product": "ADC / Gateway", "category": "other", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "4.0", "cvssSource": "NetScaler", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L", "affected": [ { "product": "ADC", "range": ">= 14.1 / < 72.61" }, { "product": "ADC", "range": ">= 13.1 / < 63.18" }, { "product": "ADC", "range": ">= 14.1 FIPS / < 72.61" }, { "product": "ADC", "range": ">= 13.1 FIPS and NDcPP / < 37.272" }, { "product": "Gateway", "range": ">= 14.1 / < 72.61" }, { "product": "Gateway", "range": ">= 13.1 / < 63.18" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-8452", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-06-30T12:41:07.622Z", "modifiedAt": "2026-08-27T03:56:34.886Z", "fetchedAt": "2026-10-23T02:43:51.288Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server", "sourceTitle": "Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "NetScaler", "product": "ADC", "versions": [ { "status": "affected", "version": "14.1", "lessThan": "72.61", "versionType": "patch" }, { "status": "affected", "version": "13.1", "lessThan": "63.18", "versionType": "patch" }, { "status": "affected", "version": "14.1 FIPS", "lessThan": "72.61", "versionType": "patch" }, { "status": "affected", "version": "13.1 FIPS and NDcPP", "lessThan": "37.272", "versionType": "patch" } ], "defaultStatus": "unaffected" }, { "vendor": "NetScaler", "product": "Gateway", "versions": [ { "status": "affected", "version": "14.1", "lessThan": "72.61", "versionType": "patch" }, { "status": "affected", "version": "13.1", "lessThan": "63.18", "versionType": "patch" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-8452", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "fetchedAt": "2026-10-23T02:43:51.288Z", "publishedAt": "2026-06-30T12:41:07.622Z", "modifiedAt": "2026-08-27T03:56:34.886Z", "state": "published", "provider": "NetScaler", "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service", "descriptions": [ { "lang": "en", "value": "Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "NetScaler", "product": "ADC", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "14.1", "lessThan": "72.61", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "13.1", "lessThan": "63.18", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "14.1 FIPS", "lessThan": "72.61", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "13.1 FIPS and NDcPP", "lessThan": "37.272", "versionType": "patch", "status": "affected" } ] }, { "vendor": "NetScaler", "product": "Gateway", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "14.1", "lessThan": "72.61", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "13.1", "lessThan": "63.18", "versionType": "patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "NetScaler", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604", "label": "NetScaler", "tags": [], "provider": "NetScaler", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8452", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"14.1\",\"lessThan\":\"72.61\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"13.1\",\"lessThan\":\"63.18\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"14.1 FIPS\",\"lessThan\":\"72.61\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"lessThan\":\"37.272\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"14.1\",\"lessThan\":\"72.61\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"13.1\",\"lessThan\":\"63.18\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"LOW\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.8,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-27T03:56:34.886Z", "fetchedAt": "2026-10-23T02:43:51.288Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-26T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "ADC / Gatewayにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:22.369Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "49e1bf5d33ed16285d99c84ae90847f68bf2d37c13e94611f39b6fcb29871539", "sourceModifiedAt": "2026-08-27T03:56:34.886Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "NetScaler ADC および NetScaler Gateway におけるメモリオーバーフローの脆弱性で、機器が Gateway（SSL VPN、ICA Proxy、CVPN、RDP Proxy）または AAA 仮想サーバとして設定されている場合に、予測不能または誤った動作やサービス拒否（DoS）を引き起こす可能性があります。", "risk": "予測不能または誤った動作が発生し、サービス拒否（DoS）になる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "NetScaler ADC のバージョン 14.1（72.61 未満）、13.1（63.18 未満）、14.1 FIPS（72.61 未満）、13.1 FIPS および NDcPP（37.272 未満）が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "NetScaler Gateway のバージョン 14.1（72.61 未満）および 13.1（63.18 未満）が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E4", "E1" ] }, { "text": "影響は、機器が Gateway（SSL VPN、ICA Proxy、CVPN、RDP Proxy）または AAA 仮想サーバとして設定されている場合に限られます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：NetScaler / ADC。影響ありとして記載：14.1以上、72.61未満。影響ありとして記載：13.1以上、63.18未満。影響ありとして記載：14.1 FIPS以上、72.61未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.272未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1以上、72.61未満。影響ありとして記載：13.1以上、63.18未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ADC / Gateway」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-8452", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-8452" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-8452", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-8452" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-8452", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-8452" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-8452", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourceField": "/containers/cna/title", "excerpt": "Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"NetScaler\",\"product\":\"ADC\",\"versions\":[{\"status\":\"affected\",\"version\":\"14.1\",\"lessThan\":\"72.61\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"13.1\",\"lessThan\":\"63.18\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"14.1 FIPS\",\"lessThan\":\"72.61\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"lessThan\":\"37.272\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8452.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"NetScaler\",\"product\":\"Gateway\",\"versions\":[{\"status\":\"affected\",\"version\":\"14.1\",\"lessThan\":\"72.61\",\"versionType\":\"patch\"},{\"status\":\"affected\",\"version\":\"13.1\",\"lessThan\":\"63.18\",\"versionType\":\"patch\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-8452\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-8452（ADC / Gateway）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・NetScaler ADC のバージョン 14.1（72.61 未満）、13.1（63.18 未満）、14.1 FIPS（72.61 未満）、13.1 FIPS および NDcPP（37.272 未満）が影響を受けます。\n・NetScaler Gateway のバージョン 14.1（72.61 未満）および 13.1（63.18 未満）が影響を受けます。\n・影響は、機器が Gateway（SSL VPN、ICA Proxy、CVPN、RDP Proxy）または AAA 仮想サーバとして設定されている場合に限られます。\n・公式の対象表：NetScaler / ADC。影響ありとして記載：14.1以上、72.61未満。影響ありとして記載：13.1以上、63.18未満。影響ありとして記載：14.1 FIPS以上、72.61未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.272未満。\n・公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1以上、72.61未満。影響ありとして記載：13.1以上、63.18未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-8452", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:22.369Z", "lastSuccess": "2026-10-23T03:22:22.369Z", "sourceCheckedAt": "2026-10-23T02:43:51.288Z", "errorCode": null }, "glossary": [ { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-60004", "aliases": [], "title": "Gitea：コード実行", "summary": "Gitea 1.27.1 未満では、diffpatch API を介して Git フックをインストールすることで、攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "product": "Gitea", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Gitea", "range": ">= 1.17 / < 1.27.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-60004", "label": "CVE公式レコード" }, { "url": "https://blog.gitea.com/release-of-1.27.1/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "label": "CISAが示す関連情報" }, { "url": "https://www.runzero.com/blog/gitea/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/0xBlackash/CVE-2026-60004", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60004", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-26T19:45:00.000Z", "modifiedAt": "2026-09-08T18:03:21.873Z", "fetchedAt": "2026-10-23T02:43:49.717Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Gitea", "vendor": "Gitea", "versions": [ { "lessThan": "1.27.1", "status": "affected", "version": "1.17", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-60004", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "fetchedAt": "2026-10-23T02:43:49.717Z", "publishedAt": "2026-08-26T19:45:00.000Z", "modifiedAt": "2026-09-08T18:03:21.873Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Gitea", "product": "Gitea", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "1.17", "lessThan": "1.27.1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://blog.gitea.com/release-of-1.27.1/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.runzero.com/blog/gitea/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://github.com/0xBlackash/CVE-2026-60004", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60004", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Gitea\",\"vendor\":\"Gitea\",\"versions\":[{\"lessThan\":\"1.27.1\",\"status\":\"affected\",\"version\":\"1.17\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"description\":\"CWE-94 Improper Control of Generation of Code ('Code Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-08T18:03:21.873Z", "fetchedAt": "2026-10-23T02:43:49.717Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-25T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Giteaにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:22.434Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "f9bd54688b64d451e8bd0448882f000ecf61c885ed8f0aef1c05398403ea49df", "sourceModifiedAt": "2026-09-08T18:03:21.873Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Gitea 1.27.1 未満では、diffpatch API を介して Git フックをインストールすることで、攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Gitea のバージョンが 1.27.1 未満（例: 1.17 など）である場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json" ], "evidenceIds": [ "E2" ] }, { "text": "diffpatch API が利用可能で、Git フックのインストールが可能な構成であることが条件です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Gitea / Gitea。影響ありとして記載：1.17以上、1.27.1未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Gitea」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-60004", "https://blog.gitea.com/release-of-1.27.1/", "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "https://www.runzero.com/blog/gitea/", "https://github.com/0xBlackash/CVE-2026-60004", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-60004" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-60004", "https://blog.gitea.com/release-of-1.27.1/", "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "https://www.runzero.com/blog/gitea/", "https://github.com/0xBlackash/CVE-2026-60004", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-60004" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-60004", "https://blog.gitea.com/release-of-1.27.1/", "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "https://www.runzero.com/blog/gitea/", "https://github.com/0xBlackash/CVE-2026-60004", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-60004" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-60004", "label": "CVE公式レコード" }, { "url": "https://blog.gitea.com/release-of-1.27.1/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "label": "CISAが示す関連情報" }, { "url": "https://www.runzero.com/blog/gitea/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/0xBlackash/CVE-2026-60004", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60004", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60004.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Gitea\",\"vendor\":\"Gitea\",\"versions\":[{\"lessThan\":\"1.27.1\",\"status\":\"affected\",\"version\":\"1.17\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-60004\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-60004（Gitea）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Gitea のバージョンが 1.27.1 未満（例: 1.17 など）である場合に影響を受けます。\n・diffpatch API が利用可能で、Git フックのインストールが可能な構成であることが条件です。\n・公式の対象表：Gitea / Gitea。影響ありとして記載：1.17以上、1.27.1未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-60004", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:22.434Z", "lastSuccess": "2026-10-23T03:22:22.434Z", "sourceCheckedAt": "2026-10-23T02:43:49.717Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-21962", "aliases": [], "title": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in：脆弱性情報", "summary": "Oracle HTTP Server と Oracle Weblogic Server Proxy Plug-in（Apache HTTP Server 用および IIS 用）に脆弱性があり、ネットワーク経由で HTTP にアクセスできる認証されていない攻撃者が簡単に悪用できるため、これらの製品を侵害できる可能性があります。", "risk": "攻撃が成功すると、重要なデータの無断作成・削除・変更や、Oracle HTTP Server および Oracle Weblogic Server Proxy Plug-in がアクセス可能なすべてのデータへの無断アクセスが可能になります。", "product": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "oracle", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "affected": [ { "product": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in", "range": "12.2.1.4.0" }, { "product": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in", "range": "14.1.1.0.0" }, { "product": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in", "range": "14.1.2.0.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "label": "CVE：oracle" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-21962", "label": "CVE公式レコード" }, { "url": "https://www.oracle.com/security-alerts/cpujan2026.html", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21962", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-01-20T21:56:32.665Z", "modifiedAt": "2026-08-25T03:55:46.348Z", "fetchedAt": "2026-10-23T02:43:47.900Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Oracle Corporation", "product": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in", "versions": [ { "version": "12.2.1.4.0", "status": "affected", "versionType": "semver" }, { "version": "14.1.1.0.0", "status": "affected", "versionType": "semver" }, { "version": "14.1.2.0.0", "status": "affected", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-21962", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "fetchedAt": "2026-10-23T02:43:47.900Z", "publishedAt": "2026-01-20T21:56:32.665Z", "modifiedAt": "2026-08-25T03:55:46.348Z", "state": "published", "provider": "oracle", "title": "", "descriptions": [ { "lang": "en-US", "value": "Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Oracle Corporation", "product": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.2.1.4.0", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "14.1.1.0.0", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "14.1.2.0.0", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en-US", "description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "oracle", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpujan2026.html", "label": "Oracle Advisory", "tags": [ "vendor-advisory" ], "provider": "oracle", "sourcePath": "/containers/cna/references/0" }, { "url": "https://x.com/0xacb/status/2015473216844620280", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://web.archive.org/web/20260129165916/https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21962", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/3" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Oracle Corporation\",\"product\":\"Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in\",\"versions\":[{\"version\":\"12.2.1.4.0\",\"status\":\"affected\",\"versionType\":\"semver\"},{\"version\":\"14.1.1.0.0\",\"status\":\"affected\",\"versionType\":\"semver\"},{\"version\":\"14.1.2.0.0\",\"status\":\"affected\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en-US\",\"description\":\"Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-25T03:55:46.348Z", "fetchedAt": "2026-10-23T02:43:47.900Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-24T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-inに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:23.649Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "193358a2616319e85cc030ac42fd8573184685080be24c179fa2c03eb0bc2f52", "sourceModifiedAt": "2026-08-25T03:55:46.348Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Oracle HTTP Server と Oracle Weblogic Server Proxy Plug-in（Apache HTTP Server 用および IIS 用）に脆弱性があり、ネットワーク経由で HTTP にアクセスできる認証されていない攻撃者が簡単に悪用できるため、これらの製品を侵害できる可能性があります。", "risk": "攻撃が成功すると、重要なデータの無断作成・削除・変更や、Oracle HTTP Server および Oracle Weblogic Server Proxy Plug-in がアクセス可能なすべてのデータへの無断アクセスが可能になります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "影響を受けるバージョンは 12.2.1.4.0、14.1.1.0.0、14.1.2.0.0 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json" ], "evidenceIds": [ "E3" ] }, { "text": "IIS 用 Weblogic Server Proxy Plug-in が影響を受けるのは 12.2.1.4.0 のみです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Oracle Corporation / Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in。影響ありとして記載：12.2.1.4.0。影響ありとして記載：14.1.1.0.0。影響ありとして記載：14.1.2.0.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-21962", "https://www.oracle.com/security-alerts/cpujan2026.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-21962" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-21962", "https://www.oracle.com/security-alerts/cpujan2026.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-21962" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-21962", "https://www.oracle.com/security-alerts/cpujan2026.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-21962" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "label": "CVE：oracle" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-21962", "label": "CVE公式レコード" }, { "url": "https://www.oracle.com/security-alerts/cpujan2026.html", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21962", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en-US\",\"description\":\"Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21962.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Oracle Corporation\",\"product\":\"Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in\",\"versions\":[{\"version\":\"12.2.1.4.0\",\"status\":\"affected\",\"versionType\":\"semver\"},{\"version\":\"14.1.1.0.0\",\"status\":\"affected\",\"versionType\":\"semver\"},{\"version\":\"14.1.2.0.0\",\"status\":\"affected\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-21962\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-21962（Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受けるバージョンは 12.2.1.4.0、14.1.1.0.0、14.1.2.0.0 です。\n・IIS 用 Weblogic Server Proxy Plug-in が影響を受けるのは 12.2.1.4.0 のみです。\n・公式の対象表：Oracle Corporation / Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in。影響ありとして記載：12.2.1.4.0。影響ありとして記載：14.1.1.0.0。影響ありとして記載：14.1.2.0.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-21962", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:23.649Z", "lastSuccess": "2026-10-23T03:22:23.649Z", "sourceCheckedAt": "2026-10-23T02:43:47.900Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-73570", "aliases": [], "title": "Collaboration：コード実行", "summary": "Zimbra Collaboration (ZCS) のバージョンが 10.1.20 未満で、オプションの zimbra‑snmp パッケージがインストールされ SNMP 通知が有効になっている場合、SNMP 通知処理時に信頼できない入力が適切にサニタイズされません。そのため、認証されていない攻撃者が細工した SMTP リクエストを送信すると、Zimbra ユーザー権限で任意の OS コマンドが実行される可能性があります。", "risk": "攻撃者が任意の OS コマンドを Zimbra ユーザー権限で実行できる可能性があります。", "product": "Collaboration", "category": "other", "component": "package", "severity": "high", "cvss": 8.9, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "affected": [ { "product": "Collaboration", "range": "< 10.1.20" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73570", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "CVE掲載の参考情報" }, { "url": "https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73570", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-13T15:19:42.195Z", "modifiedAt": "2026-08-24T12:17:51.837Z", "fetchedAt": "2026-10-23T02:43:50.552Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Collaboration", "vendor": "Zimbra", "versions": [ { "lessThan": "10.1.20", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-73570", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "fetchedAt": "2026-10-23T02:43:50.552Z", "publishedAt": "2026-08-13T15:19:42.195Z", "modifiedAt": "2026-08-24T12:17:51.837Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Zimbra", "product": "Collaboration", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "10.1.20", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-78", "lang": "en", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "baseScore": 8.9, "baseSeverity": "HIGH", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://moje.cert.pl/komunikaty/2026/145/aktywnie-wykorzystywana-podatnosc-w-zimbra-collaboration-suite/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-73570", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Collaboration\",\"vendor\":\"Zimbra\",\"versions\":[{\"lessThan\":\"10.1.20\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-78\",\"description\":\"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"LOW\",\"baseScore\":8.9,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-24T12:17:51.837Z", "fetchedAt": "2026-10-23T02:43:50.552Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-21T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Collaborationにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:24.043Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0e49cac28a8998b32c5b94fc64e18fb7e74b89173f54e8e93d595a57e91e055a", "sourceModifiedAt": "2026-08-24T12:17:51.837Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Zimbra Collaboration (ZCS) のバージョンが 10.1.20 未満で、オプションの zimbra‑snmp パッケージがインストールされ SNMP 通知が有効になっている場合、SNMP 通知処理時に信頼できない入力が適切にサニタイズされません。そのため、認証されていない攻撃者が細工した SMTP リクエストを送信すると、Zimbra ユーザー権限で任意の OS コマンドが実行される可能性があります。", "risk": "攻撃者が任意の OS コマンドを Zimbra ユーザー権限で実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Zimbra Collaboration のバージョンが 10.1.20 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json" ], "evidenceIds": [ "E2" ] }, { "text": "オプションの zimbra‑snmp パッケージがインストールされていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json" ], "evidenceIds": [ "E1" ] }, { "text": "SNMP 通知が有効化されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Zimbra / Collaboration。影響ありとして記載：10.1.20未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Collaboration」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-73570", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://wiki.zimbra.com/wiki/Security_Center", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570", "https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-73570" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-73570", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://wiki.zimbra.com/wiki/Security_Center", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570", "https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-73570" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-73570", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://wiki.zimbra.com/wiki/Security_Center", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570", "https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-73570" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73570", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "CVE掲載の参考情報" }, { "url": "https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73570", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73570.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Collaboration\",\"vendor\":\"Zimbra\",\"versions\":[{\"lessThan\":\"10.1.20\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-73570\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-73570（Collaboration）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Zimbra Collaboration のバージョンが 10.1.20 未満であること。\n・オプションの zimbra‑snmp パッケージがインストールされていること。\n・SNMP 通知が有効化されていること。\n・公式の対象表：Zimbra / Collaboration。影響ありとして記載：10.1.20未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-73570", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:24.043Z", "lastSuccess": "2026-10-23T03:22:24.043Z", "sourceCheckedAt": "2026-10-23T02:43:50.552Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-72529", "aliases": [], "title": "TrueConf Server：脆弱性情報", "summary": "ネットワークからポート 4307/TCP 経由で TrueConf Server に接続できる認証されていないリモート攻撃者が、バージョン 5.3.X から 5.3.9、5.4.X から 5.4.9、5.5.X から 5.5.5、そしてそれ以前のバージョンに対して、未公開の関数を呼び出すことで任意のスクリプトを実行できる。", "risk": "攻撃者が任意のスクリプトを実行できるため、サーバー上で不正な処理が行われる可能性がある。", "product": "TrueConf Server", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "Kaspersky", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "TrueConf Server", "range": "* / < 5.3（環境: Windows / Linux）" }, { "product": "TrueConf Server", "range": ">= 5.3 / < 5.3.9（環境: Windows / Linux）" }, { "product": "TrueConf Server", "range": ">= 5.4 / < 5.4.9（環境: Windows / Linux）" }, { "product": "TrueConf Server", "range": ">= 5.5 / < 5.5.5（環境: Windows / Linux）" } ], "fixed": [], "steps": [ "TrueConf server をバージョン 5.3.9、5.4.9、または 5.5.5 に更新する。", "「CVE-2026-72529」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "label": "CVE：Kaspersky" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-72529", "label": "CVE公式レコード" }, { "url": "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/", "label": "CISAが示す関連情報" }, { "url": "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72529", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-19T16:55:14.949Z", "modifiedAt": "2026-08-21T03:55:16.895Z", "fetchedAt": "2026-10-23T02:43:50.224Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "TrueConf", "product": "TrueConf Server", "platforms": [ "Windows", "Linux" ], "versions": [ { "version": "*", "status": "affected", "lessThan": "5.3", "versionType": "custom" }, { "version": "5.3", "status": "affected", "lessThan": "5.3.9", "versionType": "custom" }, { "version": "5.4", "status": "affected", "lessThan": "5.4.9", "versionType": "custom" }, { "version": "5.5", "status": "affected", "lessThan": "5.5.5", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "configurationNotes": "対象環境・機能: Windows / Linux。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-72529", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "fetchedAt": "2026-10-23T02:43:50.224Z", "publishedAt": "2026-08-19T16:55:14.949Z", "modifiedAt": "2026-08-21T03:55:16.895Z", "state": "published", "provider": "Kaspersky", "title": "", "descriptions": [ { "lang": "en", "value": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "TrueConf", "product": "TrueConf Server", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Windows", "Linux" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "*", "lessThan": "5.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "5.3", "lessThan": "5.3.9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "5.4", "lessThan": "5.4.9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "5.5", "lessThan": "5.5.5", "versionType": "custom", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [ { "lang": "en", "value": "Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.", "sourcePath": "/containers/cna/workarounds/0/value" }, { "lang": "en", "value": "Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident.", "sourcePath": "/containers/cna/workarounds/1/value" } ], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "Kaspersky", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "Kaspersky", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/", "label": "KLCERT-26-057: TrueConf Server. Missing Authentication for Critical Function", "tags": [ "third-party-advisory" ], "provider": "Kaspersky", "sourcePath": "/containers/cna/references/0" }, { "url": "https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/", "label": "CISA-ADP", "tags": [ "related" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72529", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"TrueConf\",\"product\":\"TrueConf Server\",\"platforms\":[\"Windows\",\"Linux\"],\"versions\":[{\"version\":\"*\",\"status\":\"affected\",\"lessThan\":\"5.3\",\"versionType\":\"custom\"},{\"version\":\"5.3\",\"status\":\"affected\",\"lessThan\":\"5.3.9\",\"versionType\":\"custom\"},{\"version\":\"5.4\",\"status\":\"affected\",\"lessThan\":\"5.4.9\",\"versionType\":\"custom\"},{\"version\":\"5.5\",\"status\":\"affected\",\"lessThan\":\"5.5.5\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/1/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/workarounds/1/value", "text": "Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-306\",\"description\":\"CWE-306: Missing Authentication for Critical Function\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-21T03:55:16.895Z", "fetchedAt": "2026-10-23T02:43:50.224Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "TrueConf Serverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:25.166Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "3fda09452d76de33d5db82a6ff999bfd2f82690d54fc6d51eb7573ccc267d287", "sourceModifiedAt": "2026-08-21T03:55:16.895Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ネットワークからポート 4307/TCP 経由で TrueConf Server に接続できる認証されていないリモート攻撃者が、バージョン 5.3.X から 5.3.9、5.4.X から 5.4.9、5.5.X から 5.5.5、そしてそれ以前のバージョンに対して、未公開の関数を呼び出すことで任意のスクリプトを実行できる。", "risk": "攻撃者が任意のスクリプトを実行できるため、サーバー上で不正な処理が行われる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "TrueConf Server が Windows 上で動作しており、バージョンが 5.3 未満、5.3 以上 5.3.9 未満、5.4 以上 5.4.9 未満、5.5 以上 5.5.5 未満である場合に脆弱性の対象になる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E2" ] }, { "text": "TrueConf Server が Linux 上で動作しており、バージョンが 5.3 未満、5.3 以上 5.3.9 未満、5.4 以上 5.4.9 未満、5.5 以上 5.5.5 未満である場合に脆弱性の対象になる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E2" ] }, { "text": "攻撃者はネットワークからポート 4307/TCP を通じて TrueConf Server にアクセスできる必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は認証されていないリモートの未許可ユーザーである。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E1" ] }, { "text": "脆弱性は未公開の関数を呼び出すことで任意のスクリプトを実行できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：TrueConf / TrueConf Server。影響ありとして記載：5.3未満の版。影響ありとして記載：5.3以上、5.3.9未満。影響ありとして記載：5.4以上、5.4.9未満。影響ありとして記載：5.5以上、5.5.5未満。対象の環境：Windows、Linux", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E2" ] }, { "text": "「TrueConf Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72529", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72529" ] } ], "actions": [ { "text": "TrueConf server をバージョン 5.3.9、5.4.9、または 5.5.5 に更新する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E3" ] }, { "text": "「CVE-2026-72529」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-72529", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72529" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72529", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72529" ] } ], "temporaryMitigations": [ { "text": "最新のウイルス定義とモジュールを備えたアンチウイルスソフトでフルスキャンを実施する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E4" ] }, { "text": "侵害の指標をスキャンし、検出された場合は該当アカウントのパスワードを変更し、Kaspersky ICS CERT (ics-cert@kaspersky.com) に連絡して指示を受ける。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72529", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72529" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "label": "CVE：Kaspersky" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-72529", "label": "CVE公式レコード" }, { "url": "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/", "label": "CISAが示す関連情報" }, { "url": "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72529", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"TrueConf\",\"product\":\"TrueConf Server\",\"platforms\":[\"Windows\",\"Linux\"],\"versions\":[{\"version\":\"*\",\"status\":\"affected\",\"lessThan\":\"5.3\",\"versionType\":\"custom\"},{\"version\":\"5.3\",\"status\":\"affected\",\"lessThan\":\"5.3.9\",\"versionType\":\"custom\"},{\"version\":\"5.4\",\"status\":\"affected\",\"lessThan\":\"5.4.9\",\"versionType\":\"custom\"},{\"version\":\"5.5\",\"status\":\"affected\",\"lessThan\":\"5.5.5\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.", "language": "en", "representation": "source_excerpt" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.", "language": "en", "representation": "source_excerpt" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72529.json", "sourceField": "/containers/cna/workarounds/1/value", "excerpt": "Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident.", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-72529\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-72529（TrueConf Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・TrueConf Server が Windows 上で動作しており、バージョンが 5.3 未満、5.3 以上 5.3.9 未満、5.4 以上 5.4.9 未満、5.5 以上 5.5.5 未満である場合に脆弱性の対象になる。\n・TrueConf Server が Linux 上で動作しており、バージョンが 5.3 未満、5.3 以上 5.3.9 未満、5.4 以上 5.4.9 未満、5.5 以上 5.5.5 未満である場合に脆弱性の対象になる。\n・攻撃者はネットワークからポート 4307/TCP を通じて TrueConf Server にアクセスできる必要がある。\n・攻撃者は認証されていないリモートの未許可ユーザーである。\n・脆弱性は未公開の関数を呼び出すことで任意のスクリプトを実行できる。\n・公式の対象表：TrueConf / TrueConf Server。影響ありとして記載：5.3未満の版。影響ありとして記載：5.3以上、5.3.9未満。影響ありとして記載：5.4以上、5.4.9未満。影響ありとして記載：5.5以上、5.5.5未満。対象の環境：Windows、Linux\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-72529", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:25.166Z", "lastSuccess": "2026-10-23T03:22:25.166Z", "sourceCheckedAt": "2026-10-23T02:43:50.224Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-72530", "aliases": [], "title": "TrueConf Server：コード実行", "summary": "ネットワークからポート 4307/TCP 経由で TrueConf Server にアクセスできるリモートの不正な攻撃者は、特別に作成されたスクリプトを使って分離された環境から抜け出し、ホストシステム上で任意のコードを実行できる。", "risk": "攻撃者がホストシステム上で任意のコードを実行できる可能性がある。", "product": "TrueConf Server", "category": "other", "component": "package", "severity": "critical", "cvss": 9.5, "cvssVersion": "4.0", "cvssSource": "Kaspersky", "cvssVector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "TrueConf Server", "range": "* / < 5.3（環境: Windows / Linux）" }, { "product": "TrueConf Server", "range": ">= 5.3 / < 5.3.9（環境: Windows / Linux）" }, { "product": "TrueConf Server", "range": ">= 5.4 / < 5.4.9（環境: Windows / Linux）" }, { "product": "TrueConf Server", "range": ">= 5.5 / < 5.5.5（環境: Windows / Linux）" } ], "fixed": [], "steps": [ "TrueConf Server をバージョン 5.3.9、5.4.9、または 5.5.5 に更新する。", "「CVE-2026-72530」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "label": "CVE：Kaspersky" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-72530", "label": "CVE公式レコード" }, { "url": "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/", "label": "CISAが示す関連情報" }, { "url": "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72530", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-19T16:56:53.099Z", "modifiedAt": "2026-08-21T03:55:18.512Z", "fetchedAt": "2026-10-23T02:43:50.230Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "TrueConf", "product": "TrueConf Server", "platforms": [ "Windows", "Linux" ], "versions": [ { "version": "*", "status": "affected", "lessThan": "5.3", "versionType": "custom" }, { "version": "5.3", "status": "affected", "lessThan": "5.3.9", "versionType": "custom" }, { "version": "5.4", "status": "affected", "lessThan": "5.4.9", "versionType": "custom" }, { "version": "5.5", "status": "affected", "lessThan": "5.5.5", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "configurationNotes": "対象環境・機能: Windows / Linux。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-72530", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "fetchedAt": "2026-10-23T02:43:50.230Z", "publishedAt": "2026-08-19T16:56:53.099Z", "modifiedAt": "2026-08-21T03:55:18.512Z", "state": "published", "provider": "Kaspersky", "title": "", "descriptions": [ { "lang": "en", "value": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "TrueConf", "product": "TrueConf Server", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Windows", "Linux" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "*", "lessThan": "5.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "5.3", "lessThan": "5.3.9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "5.4", "lessThan": "5.4.9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "5.5", "lessThan": "5.5.5", "versionType": "custom", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [ { "lang": "en", "value": "Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.", "sourcePath": "/containers/cna/workarounds/0/value" }, { "lang": "en", "value": "Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident.", "sourcePath": "/containers/cna/workarounds/1/value" } ], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94: Code Injection", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.5, "baseSeverity": "CRITICAL", "provider": "Kaspersky", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9, "baseSeverity": "CRITICAL", "provider": "Kaspersky", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/", "label": "KLCERT-26-058: TrueConf Server. Break out of the isolated environment", "tags": [ "third-party-advisory" ], "provider": "Kaspersky", "sourcePath": "/containers/cna/references/0" }, { "url": "https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/", "label": "CISA-ADP", "tags": [ "related" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72530", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"TrueConf\",\"product\":\"TrueConf Server\",\"platforms\":[\"Windows\",\"Linux\"],\"versions\":[{\"version\":\"*\",\"status\":\"affected\",\"lessThan\":\"5.3\",\"versionType\":\"custom\"},{\"version\":\"5.3\",\"status\":\"affected\",\"lessThan\":\"5.3.9\",\"versionType\":\"custom\"},{\"version\":\"5.4\",\"status\":\"affected\",\"lessThan\":\"5.4.9\",\"versionType\":\"custom\"},{\"version\":\"5.5\",\"status\":\"affected\",\"lessThan\":\"5.5.5\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/1/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/workarounds/1/value", "text": "Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-94\",\"description\":\"CWE-94: Code Injection\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"baseScore\":9.5,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-21T03:55:18.512Z", "fetchedAt": "2026-10-23T02:43:50.230Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "TrueConf Serverにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:25.198Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "04b55880a97b61ef1fcd51b9f939065ab0407e7751ead2f786fd35653232c886", "sourceModifiedAt": "2026-08-21T03:55:18.512Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ネットワークからポート 4307/TCP 経由で TrueConf Server にアクセスできるリモートの不正な攻撃者は、特別に作成されたスクリプトを使って分離された環境から抜け出し、ホストシステム上で任意のコードを実行できる。", "risk": "攻撃者がホストシステム上で任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "TrueConf Server が Windows または Linux 上で動作している場合、バージョン 5.3 未満、5.3 以上 5.3.9 未満、5.4 以上 5.4.9 未満、5.5 以上 5.5.5 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：TrueConf / TrueConf Server。影響ありとして記載：5.3未満の版。影響ありとして記載：5.3以上、5.3.9未満。影響ありとして記載：5.4以上、5.4.9未満。影響ありとして記載：5.5以上、5.5.5未満。対象の環境：Windows、Linux", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json" ], "evidenceIds": [ "E2" ] }, { "text": "「TrueConf Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72530", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72530" ] } ], "actions": [ { "text": "TrueConf Server をバージョン 5.3.9、5.4.9、または 5.5.5 に更新する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json" ], "evidenceIds": [ "E3" ] }, { "text": "「CVE-2026-72530」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-72530", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72530" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72530", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72530" ] } ], "temporaryMitigations": [ { "text": "最新のウイルス定義とモジュールを備えたアンチウイルスソフトでフルスキャンを実施する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json" ], "evidenceIds": [ "E4" ] }, { "text": "侵害の指標をスキャンし、検出された場合は該当アカウントのパスワードを変更し、Kaspersky ICS CERT (ics-cert@kaspersky.com) に連絡して指示を受ける。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json" ], "evidenceIds": [ "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72530", "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530", "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72530" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "label": "CVE：Kaspersky" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-72530", "label": "CVE公式レコード" }, { "url": "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/", "label": "CISAが示す関連情報" }, { "url": "https://trueconf.com/blog/news/security-fixes-updates-and-advisories", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72530", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"TrueConf\",\"product\":\"TrueConf Server\",\"platforms\":[\"Windows\",\"Linux\"],\"versions\":[{\"version\":\"*\",\"status\":\"affected\",\"lessThan\":\"5.3\",\"versionType\":\"custom\"},{\"version\":\"5.3\",\"status\":\"affected\",\"lessThan\":\"5.3.9\",\"versionType\":\"custom\"},{\"version\":\"5.4\",\"status\":\"affected\",\"lessThan\":\"5.4.9\",\"versionType\":\"custom\"},{\"version\":\"5.5\",\"status\":\"affected\",\"lessThan\":\"5.5.5\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.", "language": "en", "representation": "source_excerpt" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.", "language": "en", "representation": "source_excerpt" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72530.json", "sourceField": "/containers/cna/workarounds/1/value", "excerpt": "Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident.", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-72530\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-72530（TrueConf Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・TrueConf Server が Windows または Linux 上で動作している場合、バージョン 5.3 未満、5.3 以上 5.3.9 未満、5.4 以上 5.4.9 未満、5.5 以上 5.5.5 未満は影響を受ける。\n・公式の対象表：TrueConf / TrueConf Server。影響ありとして記載：5.3未満の版。影響ありとして記載：5.3以上、5.3.9未満。影響ありとして記載：5.4以上、5.4.9未満。影響ありとして記載：5.5以上、5.5.5未満。対象の環境：Windows、Linux\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-72530", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:25.198Z", "lastSuccess": "2026-10-23T03:22:25.198Z", "sourceCheckedAt": "2026-10-23T02:43:50.230Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-19709", "aliases": [], "title": "Membership For WooCommerce：脆弱性情報", "summary": "Membership For WooCommerce プラグインはバージョン 3.1.2 未満において、API コンシューマーシークレットが実際に生成されているかを確認せず、リクエストに含まれるシークレットとだけ比較します。そのため、認証されていない攻撃者が REST エンドポイントにアクセスでき、API が有効化されているがキーが一度も生成されていないサイトで、任意のユーザーの会員プラン詳細を取得できます。", "risk": "任意のユーザーの会員プランの詳細が外部に漏洩する可能性があります。", "product": "Membership For WooCommerce", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "Membership For WooCommerce", "range": "< 3.1.2" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19709", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/957888a4-bb11-42c6-930a-8c836170452b/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19709", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:21.457Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:47.061Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the API has been enabled but no keys were ever generated.", "sourceTitle": "Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Membership For WooCommerce", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "3.1.2" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-19709", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "fetchedAt": "2026-10-23T02:43:47.061Z", "publishedAt": "2026-08-19T06:00:21.457Z", "modifiedAt": "2026-08-19T16:38:02.711Z", "state": "published", "provider": "WPScan", "title": "Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass", "descriptions": [ { "lang": "en", "value": "The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the API has been enabled but no keys were ever generated.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Membership For WooCommerce", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "3.1.2", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-287 Improper Authentication", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/957888a4-bb11-42c6-930a-8c836170452b/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Membership For WooCommerce\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.1.2\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the API has been enabled but no keys were ever generated.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-287 Improper Authentication\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":5.3,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:38:02.711Z", "fetchedAt": "2026-10-23T02:43:47.061Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Membership For WooCommerceに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:25.537Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "272cf731b1940e98b65d23ea2e72b558130ab454a08923eb789b00c327a7903a", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Membership For WooCommerce プラグインはバージョン 3.1.2 未満において、API コンシューマーシークレットが実際に生成されているかを確認せず、リクエストに含まれるシークレットとだけ比較します。そのため、認証されていない攻撃者が REST エンドポイントにアクセスでき、API が有効化されているがキーが一度も生成されていないサイトで、任意のユーザーの会員プラン詳細を取得できます。", "risk": "任意のユーザーの会員プランの詳細が外部に漏洩する可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "プラグインのバージョンが 3.1.2 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "WordPress の REST API が有効化されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "API コンシューマーシークレットが一度も生成されていないこと。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "認証されていない攻撃者がリクエストを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "攻撃者が REST ルートに到達できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Membership For WooCommerce。影響ありとして記載：3.1.2未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Membership For WooCommerce」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-19709", "https://wpscan.com/vulnerability/957888a4-bb11-42c6-930a-8c836170452b/", "https://nvd.nist.gov/vuln/detail/CVE-2026-19709" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19709", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/957888a4-bb11-42c6-930a-8c836170452b/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19709", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "sourceField": "/containers/cna/title", "excerpt": "Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the API has been enabled but no keys were ever generated.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19709.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Membership For WooCommerce\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.1.2\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-19709（Membership For WooCommerce）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・プラグインのバージョンが 3.1.2 未満であること。\n・WordPress の REST API が有効化されていること。\n・API コンシューマーシークレットが一度も生成されていないこと。\n・認証されていない攻撃者がリクエストを送信できること。\n・攻撃者が REST ルートに到達できること。\n・公式の対象表：Membership For WooCommerce。影響ありとして記載：3.1.2未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-19709", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:25.537Z", "lastSuccess": "2026-10-23T03:22:25.537Z", "sourceCheckedAt": "2026-10-23T02:43:47.061Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-19406", "aliases": [], "title": "Easy Appointments：情報の漏えい", "summary": "Easy Appointmentsプラグインのバージョン4.0.1未満では、投稿者（contributor）以上の権限を持つユーザーが予約一覧を取得するRESTエンドポイントを利用した際に、リクエストしたユーザーに属さない予約レコードも取得できるため、サイト上のすべての予約情報（顧客名、スケジュール、ステータス）を閲覧できてしまいます。", "risk": "この問題により、顧客の氏名や予約日時、予約のステータスといった機密情報が、権限の低い投稿者レベルのユーザーに漏洩する可能性があります。", "product": "Easy Appointments", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 2.7, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "Easy Appointments", "range": ">= 3.12.28 / < 4.0.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19406", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/53cfb207-8f26-438c-a928-bc9271f312f0/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19406", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:20.837Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:47.023Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users with contributor-level access to read all bookings on the site, including customer names, schedules, and statuses.", "sourceTitle": "Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Easy Appointments", "versions": [ { "status": "affected", "versionType": "semver", "version": "3.12.28", "lessThan": "4.0.1" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-19406", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "fetchedAt": "2026-10-23T02:43:47.023Z", "publishedAt": "2026-08-19T06:00:20.837Z", "modifiedAt": "2026-08-19T16:34:36.190Z", "state": "published", "provider": "WPScan", "title": "Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing", "descriptions": [ { "lang": "en", "value": "The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users with contributor-level access to read all bookings on the site, including customer names, schedules, and statuses.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Easy Appointments", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "3.12.28", "lessThan": "4.0.1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-200 Information Exposure", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "baseScore": 2.7, "baseSeverity": "LOW", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/53cfb207-8f26-438c-a928-bc9271f312f0/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Easy Appointments\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"3.12.28\",\"lessThan\":\"4.0.1\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users with contributor-level access to read all bookings on the site, including customer names, schedules, and statuses.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-200 Information Exposure\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":2.7,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"LOW\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:34:36.190Z", "fetchedAt": "2026-10-23T02:43:47.023Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Easy Appointmentsに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:26.722Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "eff97e7b02ee6010a665608fb56fe66693e31820a81313e7fe87b2aca2013cf6", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Easy Appointmentsプラグインのバージョン4.0.1未満では、投稿者（contributor）以上の権限を持つユーザーが予約一覧を取得するRESTエンドポイントを利用した際に、リクエストしたユーザーに属さない予約レコードも取得できるため、サイト上のすべての予約情報（顧客名、スケジュール、ステータス）を閲覧できてしまいます。", "risk": "この問題により、顧客の氏名や予約日時、予約のステータスといった機密情報が、権限の低い投稿者レベルのユーザーに漏洩する可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "対象となるのは、Easy Appointmentsプラグインのバージョン3.12.28から4.0.1未満のすべてのリリースです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "影響を受けるのは、WordPressサイト上で「投稿者（contributor）以上」の権限を持つユーザーが、予約一覧を取得するRESTエンドポイントにアクセスした場合です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Easy Appointments。影響ありとして記載：3.12.28以上、4.0.1未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Easy Appointments」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-19406", "https://wpscan.com/vulnerability/53cfb207-8f26-438c-a928-bc9271f312f0/", "https://nvd.nist.gov/vuln/detail/CVE-2026-19406" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19406", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/53cfb207-8f26-438c-a928-bc9271f312f0/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19406", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "sourceField": "/containers/cna/title", "excerpt": "Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users with contributor-level access to read all bookings on the site, including customer names, schedules, and statuses.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19406.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Easy Appointments\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"3.12.28\",\"lessThan\":\"4.0.1\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-19406（Easy Appointments）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象となるのは、Easy Appointmentsプラグインのバージョン3.12.28から4.0.1未満のすべてのリリースです。\n・影響を受けるのは、WordPressサイト上で「投稿者（contributor）以上」の権限を持つユーザーが、予約一覧を取得するRESTエンドポイントにアクセスした場合です。\n・公式の対象表：Easy Appointments。影響ありとして記載：3.12.28以上、4.0.1未満。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-19406", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:26.722Z", "lastSuccess": "2026-10-23T03:22:26.722Z", "sourceCheckedAt": "2026-10-23T02:43:47.023Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-19056", "aliases": [], "title": "ProSolution WP Client：ブラウザー上での不正な処理", "summary": "ProSolution WP Client WordPress プラグインはバージョン 2.0.11 未満で、管理画面のあるページに対して 'page' パラメータを HTML 属性にそのまま埋め込むため、サニタイズやエスケープが行われません。その結果、管理者が細工されたリクエストを送信すると、ページに反映されたスクリプトが実行されるリフレクティッド XSS が発生します。", "risk": "管理者のセッション内で不正なスクリプトが実行され、管理者が意図しない操作や情報漏洩が起こる可能性があります。", "product": "ProSolution WP Client", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.1, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "ProSolution WP Client", "range": "< 2.0.11" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19056", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/83ad2038-3755-40a5-a8af-e6fac94341d1/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19056", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:20.663Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:47.019Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.", "sourceTitle": "ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "ProSolution WP Client", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "2.0.11" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-19056", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "fetchedAt": "2026-10-23T02:43:47.019Z", "publishedAt": "2026-08-19T06:00:20.663Z", "modifiedAt": "2026-08-19T16:27:26.942Z", "state": "published", "provider": "WPScan", "title": "ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter", "descriptions": [ { "lang": "en", "value": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "ProSolution WP Client", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "2.0.11", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "baseScore": 7.1, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/83ad2038-3755-40a5-a8af-e6fac94341d1/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"ProSolution WP Client\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"2.0.11\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":7.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"LOW\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:27:26.942Z", "fetchedAt": "2026-10-23T02:43:47.019Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "ProSolution WP Clientにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:26.804Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5a89a17a6c520cd6a0cbbbb31ae1dfd65fc8839c159f7f975029379c347ffc7b", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ProSolution WP Client WordPress プラグインはバージョン 2.0.11 未満で、管理画面のあるページに対して 'page' パラメータを HTML 属性にそのまま埋め込むため、サニタイズやエスケープが行われません。その結果、管理者が細工されたリクエストを送信すると、ページに反映されたスクリプトが実行されるリフレクティッド XSS が発生します。", "risk": "管理者のセッション内で不正なスクリプトが実行され、管理者が意図しない操作や情報漏洩が起こる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象製品は ProSolution WP Client プラグインで、バージョンが 2.0.11 未満のものです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "影響は管理者用ページの 'page' パラメータが HTML 属性にそのまま反映されるケースに限られます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：ProSolution WP Client。影響ありとして記載：2.0.11未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「ProSolution WP Client」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-19056", "https://wpscan.com/vulnerability/83ad2038-3755-40a5-a8af-e6fac94341d1/", "https://nvd.nist.gov/vuln/detail/CVE-2026-19056" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19056", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/83ad2038-3755-40a5-a8af-e6fac94341d1/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19056", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "sourceField": "/containers/cna/title", "excerpt": "ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19056.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"ProSolution WP Client\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"2.0.11\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-19056（ProSolution WP Client）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は ProSolution WP Client プラグインで、バージョンが 2.0.11 未満のものです。\n・影響は管理者用ページの 'page' パラメータが HTML 属性にそのまま反映されるケースに限られます。\n・公式の対象表：ProSolution WP Client。影響ありとして記載：2.0.11未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-19056", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:26.804Z", "lastSuccess": "2026-10-23T03:22:26.804Z", "sourceCheckedAt": "2026-10-23T02:43:47.019Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-19055", "aliases": [], "title": "ProSolution WP Client：ブラウザー上での不正な処理", "summary": "ProSolution WP Client WordPress プラグインはバージョン 2.0.11 未満で、公開ページの HTML 属性にいくつかのパラメータをそのまま反映し、サニタイズやエスケープを行いません。その結果、任意の訪問者（ログイン中の管理者を含む）に対して、反射型クロスサイトスクリプティング（XSS）を引き起こすことができます。", "risk": "ページを表示した人のブラウザーで不正なスクリプトが実行される可能性があります。", "product": "ProSolution WP Client", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.1, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "ProSolution WP Client", "range": "< 2.0.11" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19055", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/a1243ff3-3f0e-4068-a716-722e7cf4856b/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19055", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:20.487Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.980Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.", "sourceTitle": "ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "ProSolution WP Client", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "2.0.11" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-19055", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "fetchedAt": "2026-10-23T02:43:46.980Z", "publishedAt": "2026-08-19T06:00:20.487Z", "modifiedAt": "2026-08-19T16:25:40.127Z", "state": "published", "provider": "WPScan", "title": "ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters", "descriptions": [ { "lang": "en", "value": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "ProSolution WP Client", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "2.0.11", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "baseScore": 7.1, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/a1243ff3-3f0e-4068-a716-722e7cf4856b/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"ProSolution WP Client\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"2.0.11\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":7.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"LOW\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:25:40.127Z", "fetchedAt": "2026-10-23T02:43:46.980Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "ProSolution WP Clientにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:28.658Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "61b99e7f7d8829e5cd26ffcc651f2273dd69e0b8b06e4223ec76b0baa91fc46b", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ProSolution WP Client WordPress プラグインはバージョン 2.0.11 未満で、公開ページの HTML 属性にいくつかのパラメータをそのまま反映し、サニタイズやエスケープを行いません。その結果、任意の訪問者（ログイン中の管理者を含む）に対して、反射型クロスサイトスクリプティング（XSS）を引き起こすことができます。", "risk": "ページを表示した人のブラウザーで不正なスクリプトが実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ProSolution WP Client のバージョンが 2.0.11 未満のすべてのインストールが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "影響を受けるのは、プラグインの公開ページを閲覧するすべての訪問者で、ログイン中の管理者も含まれます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：ProSolution WP Client。影響ありとして記載：2.0.11未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「ProSolution WP Client」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-19055", "https://wpscan.com/vulnerability/a1243ff3-3f0e-4068-a716-722e7cf4856b/", "https://nvd.nist.gov/vuln/detail/CVE-2026-19055" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19055", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/a1243ff3-3f0e-4068-a716-722e7cf4856b/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19055", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "sourceField": "/containers/cna/title", "excerpt": "ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19055.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"ProSolution WP Client\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"2.0.11\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-19055（ProSolution WP Client）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ProSolution WP Client のバージョンが 2.0.11 未満のすべてのインストールが影響を受けます。\n・影響を受けるのは、プラグインの公開ページを閲覧するすべての訪問者で、ログイン中の管理者も含まれます。\n・公式の対象表：ProSolution WP Client。影響ありとして記載：2.0.11未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-19055", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:28.658Z", "lastSuccess": "2026-10-23T03:22:28.658Z", "sourceCheckedAt": "2026-10-23T02:43:46.980Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-18202", "aliases": [], "title": "JetEngine：ブラウザー上での不正な処理", "summary": "JetEngine WordPressプラグインはバージョン3.8.14未満で、SVGをサイト全体の許可されたアップロードタイプに追加しますが、ファイル内容をサニタイズしません。そのため、アップロード権限を持つユーザー（例: Author）が悪意あるJavaScriptを含むSVGをアップロードでき、これを開いた任意のユーザーのブラウザで実行される（保存型XSS）という脆弱性があります。マルチサイト環境では、ネットワーク管理者が設定したアップロードタイプ制限も上書きされます。", "risk": "悪意あるJavaScriptがSVGを閲覧したユーザーのブラウザで実行され、ページ上で不正な操作が可能になる可能性があります。", "product": "JetEngine", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "JetEngine", "range": "< 3.8.14" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-18202", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/911d3b5a-0f03-4423-b4b0-84e588c323d8/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18202", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:18.765Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.918Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with the upload files capability, such as Authors, to upload a file containing malicious JavaScript that executes in the browser of any user who opens it (Stored Cross-Site Scripting). On multisite, this also overrides an upload-type restriction set by the network administrator.", "sourceTitle": "JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "JetEngine", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "3.8.14" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-18202", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "fetchedAt": "2026-10-23T02:43:46.918Z", "publishedAt": "2026-08-19T06:00:18.765Z", "modifiedAt": "2026-08-19T16:10:47.047Z", "state": "published", "provider": "WPScan", "title": "JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload", "descriptions": [ { "lang": "en", "value": "The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with the upload files capability, such as Authors, to upload a file containing malicious JavaScript that executes in the browser of any user who opens it (Stored Cross-Site Scripting). On multisite, this also overrides an upload-type restriction set by the network administrator.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "JetEngine", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "3.8.14", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/911d3b5a-0f03-4423-b4b0-84e588c323d8/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"JetEngine\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.8.14\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with the upload files capability, such as Authors, to upload a file containing malicious JavaScript that executes in the browser of any user who opens it (Stored Cross-Site Scripting). On multisite, this also overrides an upload-type restriction set by the network administrator.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":6.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:10:47.047Z", "fetchedAt": "2026-10-23T02:43:46.918Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "JetEngineにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:28.913Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "42d0765defa85396ca6e12706ec2eb0c5654c287b59141be05277e1645d20c24", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "JetEngine WordPressプラグインはバージョン3.8.14未満で、SVGをサイト全体の許可されたアップロードタイプに追加しますが、ファイル内容をサニタイズしません。そのため、アップロード権限を持つユーザー（例: Author）が悪意あるJavaScriptを含むSVGをアップロードでき、これを開いた任意のユーザーのブラウザで実行される（保存型XSS）という脆弱性があります。マルチサイト環境では、ネットワーク管理者が設定したアップロードタイプ制限も上書きされます。", "risk": "悪意あるJavaScriptがSVGを閲覧したユーザーのブラウザで実行され、ページ上で不正な操作が可能になる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "JetEngineプラグインのバージョンが3.8.14未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "WordPressにJetEngineプラグインがインストールされていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "ユーザーが「upload_files」権限を持っていること（例: Authorロール）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "SVGファイルをアップロードできること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "マルチサイト環境では、ネットワーク管理者が設定したアップロードタイプ制限が上書きされること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：JetEngine。影響ありとして記載：3.8.14未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「JetEngine」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-18202", "https://wpscan.com/vulnerability/911d3b5a-0f03-4423-b4b0-84e588c323d8/", "https://nvd.nist.gov/vuln/detail/CVE-2026-18202" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-18202", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/911d3b5a-0f03-4423-b4b0-84e588c323d8/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18202", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with the upload files capability, such as Authors, to upload a file containing malicious JavaScript that executes in the browser of any user who opens it (Stored Cross-Site Scripting). On multisite, this also overrides an upload-type restriction set by the network administrator.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "sourceField": "/containers/cna/title", "excerpt": "JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18202.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"JetEngine\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.8.14\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-18202（JetEngine）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・JetEngineプラグインのバージョンが3.8.14未満であること。\n・WordPressにJetEngineプラグインがインストールされていること。\n・ユーザーが「upload_files」権限を持っていること（例: Authorロール）。\n・SVGファイルをアップロードできること。\n・マルチサイト環境では、ネットワーク管理者が設定したアップロードタイプ制限が上書きされること。\n・公式の対象表：JetEngine。影響ありとして記載：3.8.14未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-18202", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:28.913Z", "lastSuccess": "2026-10-23T03:22:28.913Z", "sourceCheckedAt": "2026-10-23T02:43:46.918Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-16617", "aliases": [], "title": "Simple File List：ブラウザー上での不正な処理", "summary": "Simple File Listプラグインのバージョン6.3.11まででは、ファイルの説明文を公開ファイル一覧に出力する際に適切なサニタイズやエスケープが行われません。その結果、フロントエンドのファイル管理が有効になっている場合、認証されていないユーザーが説明文に悪意あるスクリプトを埋め込むことができ、一覧を閲覧する訪問者のブラウザーでスクリプトが実行されます。", "risk": "訪問者のブラウザーで任意のスクリプトが実行される可能性があります。", "product": "Simple File List", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "Simple File List", "range": "<= 6.3.11" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16617", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/fc51a940-8e67-45d0-b47d-b16da288ebb3/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16617", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:17.365Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.758Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users (when front-end file management is enabled) to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the list.", "sourceTitle": "Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Simple File List", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "6.3.11" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-16617", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "fetchedAt": "2026-10-23T02:43:46.758Z", "publishedAt": "2026-08-19T06:00:17.365Z", "modifiedAt": "2026-08-19T17:49:46.832Z", "state": "published", "provider": "WPScan", "title": "Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description", "descriptions": [ { "lang": "en", "value": "The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users (when front-end file management is enabled) to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the list.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Simple File List", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "6.3.11", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/fc51a940-8e67-45d0-b47d-b16da288ebb3/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Simple File List\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"6.3.11\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users (when front-end file management is enabled) to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the list.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T17:49:46.832Z", "fetchedAt": "2026-10-23T02:43:46.758Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Simple File Listにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:29.522Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2c2defcc3691d16a89b7bcb1956abbc319460ad9ff624b0364cbb6b17daf5281", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Simple File Listプラグインのバージョン6.3.11まででは、ファイルの説明文を公開ファイル一覧に出力する際に適切なサニタイズやエスケープが行われません。その結果、フロントエンドのファイル管理が有効になっている場合、認証されていないユーザーが説明文に悪意あるスクリプトを埋め込むことができ、一覧を閲覧する訪問者のブラウザーでスクリプトが実行されます。", "risk": "訪問者のブラウザーで任意のスクリプトが実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Simple File Listプラグインのバージョンが6.3.11以下であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "フロントエンドのファイル管理機能が有効になっていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "認証されていないユーザーでも攻撃が可能であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Simple File List。影響ありとして記載：6.3.11以下の版。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Simple File List」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-16617", "https://wpscan.com/vulnerability/fc51a940-8e67-45d0-b47d-b16da288ebb3/", "https://nvd.nist.gov/vuln/detail/CVE-2026-16617" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16617", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/fc51a940-8e67-45d0-b47d-b16da288ebb3/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16617", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "sourceField": "/containers/cna/title", "excerpt": "Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users (when front-end file management is enabled) to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the list.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16617.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Simple File List\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"6.3.11\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-16617（Simple File List）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Simple File Listプラグインのバージョンが6.3.11以下であること。\n・フロントエンドのファイル管理機能が有効になっていること。\n・認証されていないユーザーでも攻撃が可能であること。\n・公式の対象表：Simple File List。影響ありとして記載：6.3.11以下の版。個別に記されていない版の影響は、原資料でも未確定です。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-16617", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:29.522Z", "lastSuccess": "2026-10-23T03:22:29.522Z", "sourceCheckedAt": "2026-10-23T02:43:46.758Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-16616", "aliases": [], "title": "Simple File List：ファイルへの不正アクセス", "summary": "Simple File List プラグイン（バージョン 6.3.11 以下）は、認証されていないユーザーがファイル移動操作の元になるパスを検証しないため、任意のサーバー上のファイルを読み取ったり、重要なファイルをウェブルート外へ移動させることができます。", "risk": "この脆弱性により、機密情報が漏洩し、サイトが乗っ取られる可能性があります。", "product": "Simple File List", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "affected": [ { "product": "Simple File List", "range": "<= 6.3.11" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16616", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/9631c97e-42e5-43b0-8998-e106f474ffba/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16616", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:17.192Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.742Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure and potential site takeover.", "sourceTitle": "Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Simple File List", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "6.3.11" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-16616", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "fetchedAt": "2026-10-23T02:43:46.742Z", "publishedAt": "2026-08-19T06:00:17.192Z", "modifiedAt": "2026-08-19T17:47:16.763Z", "state": "published", "provider": "WPScan", "title": "Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal", "descriptions": [ { "lang": "en", "value": "The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure and potential site takeover.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Simple File List", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "6.3.11", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/9631c97e-42e5-43b0-8998-e106f474ffba/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Simple File List\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"6.3.11\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure and potential site takeover.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":8.6,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T17:47:16.763Z", "fetchedAt": "2026-10-23T02:43:46.742Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Simple File Listにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:29.634Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9c0c09e717b8fb818e56a12023cea1b7e172b0527c146e9e7043e7f35a81fa6e", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Simple File List プラグイン（バージョン 6.3.11 以下）は、認証されていないユーザーがファイル移動操作の元になるパスを検証しないため、任意のサーバー上のファイルを読み取ったり、重要なファイルをウェブルート外へ移動させることができます。", "risk": "この脆弱性により、機密情報が漏洩し、サイトが乗っ取られる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "対象製品は WordPress 用 Simple File List プラグインです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "バージョン 6.3.11 以下が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "認証されていないユーザーがファイル移動操作のソースパスを指定できる状態です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "ソースパスの検証が行われないため、任意のファイルを読み取ることが可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "検証されないパスを利用して、重要なファイルをウェブルート外へ移動させることが可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Simple File List。影響ありとして記載：6.3.11以下の版。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Simple File List」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-16616", "https://wpscan.com/vulnerability/9631c97e-42e5-43b0-8998-e106f474ffba/", "https://nvd.nist.gov/vuln/detail/CVE-2026-16616" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16616", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/9631c97e-42e5-43b0-8998-e106f474ffba/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16616", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "sourceField": "/containers/cna/title", "excerpt": "Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure and potential site takeover.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16616.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Simple File List\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"6.3.11\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-16616（Simple File List）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は WordPress 用 Simple File List プラグインです。\n・バージョン 6.3.11 以下が影響を受けます。\n・認証されていないユーザーがファイル移動操作のソースパスを指定できる状態です。\n・ソースパスの検証が行われないため、任意のファイルを読み取ることが可能です。\n・検証されないパスを利用して、重要なファイルをウェブルート外へ移動させることが可能です。\n・公式の対象表：Simple File List。影響ありとして記載：6.3.11以下の版。個別に記されていない版の影響は、原資料でも未確定です。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-16616", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:29.634Z", "lastSuccess": "2026-10-23T03:22:29.634Z", "sourceCheckedAt": "2026-10-23T02:43:46.742Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-16570", "aliases": [], "title": "NextScripts: Social Networks Auto-Poster：ブラウザー上での不正な処理", "summary": "NextScripts: Social Networks Auto-Poster プラグイン（バージョン 4.4.8 未満）は、管理者ページのクエリ文字列パラメータを適切にエスケープせずに表示するため、攻撃者が細工したリンクを開いたログイン中のユーザー（例: 管理者）に対して、ページを表示した人のブラウザーで不正な処理を動かす Reflected XSS 攻撃が可能になる。", "risk": "攻撃者が細工したリンクを開いた管理者などのログインユーザーのブラウザーで不正なスクリプトが実行される可能性がある。", "product": "NextScripts: Social Networks Auto-Poster", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.1, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "NextScripts: Social Networks Auto-Poster", "range": "< 4.4.8" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16570", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/25c42ca3-ff25-4b43-a712-2876398d82ab/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16570", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:17.019Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.728Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are tricked into opening a crafted link.", "sourceTitle": "NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "NextScripts: Social Networks Auto-Poster", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "4.4.8" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-16570", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "fetchedAt": "2026-10-23T02:43:46.728Z", "publishedAt": "2026-08-19T06:00:17.019Z", "modifiedAt": "2026-08-19T14:07:09.716Z", "state": "published", "provider": "WPScan", "title": "NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback", "descriptions": [ { "lang": "en", "value": "The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are tricked into opening a crafted link.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "NextScripts: Social Networks Auto-Poster", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "4.4.8", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "baseScore": 7.1, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/25c42ca3-ff25-4b43-a712-2876398d82ab/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"NextScripts: Social Networks Auto-Poster\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.4.8\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are tricked into opening a crafted link.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":7.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"LOW\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T14:07:09.716Z", "fetchedAt": "2026-10-23T02:43:46.728Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "NextScripts: Social Networks Auto-Posterにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:33.391Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "64f79ef819c70903b064912e1876bce81e2a3fdee94b46e2eaf371c75cec5266", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "NextScripts: Social Networks Auto-Poster プラグイン（バージョン 4.4.8 未満）は、管理者ページのクエリ文字列パラメータを適切にエスケープせずに表示するため、攻撃者が細工したリンクを開いたログイン中のユーザー（例: 管理者）に対して、ページを表示した人のブラウザーで不正な処理を動かす Reflected XSS 攻撃が可能になる。", "risk": "攻撃者が細工したリンクを開いた管理者などのログインユーザーのブラウザーで不正なスクリプトが実行される可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "NextScripts: Social Networks Auto-Poster WordPress プラグインのバージョンが 4.4.8 未満である場合に影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "攻撃は、管理者などのログイン済みユーザーが細工されたリンクを開くことで実行される。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：NextScripts: Social Networks Auto-Poster。影響ありとして記載：4.4.8未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「NextScripts: Social Networks Auto-Poster」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-16570", "https://wpscan.com/vulnerability/25c42ca3-ff25-4b43-a712-2876398d82ab/", "https://nvd.nist.gov/vuln/detail/CVE-2026-16570" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16570", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/25c42ca3-ff25-4b43-a712-2876398d82ab/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16570", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are tricked into opening a crafted link.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "sourceField": "/containers/cna/title", "excerpt": "NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16570.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"NextScripts: Social Networks Auto-Poster\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.4.8\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-16570（NextScripts: Social Networks Auto-Poster）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・NextScripts: Social Networks Auto-Poster WordPress プラグインのバージョンが 4.4.8 未満である場合に影響を受ける。\n・攻撃は、管理者などのログイン済みユーザーが細工されたリンクを開くことで実行される。\n・公式の対象表：NextScripts: Social Networks Auto-Poster。影響ありとして記載：4.4.8未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-16570", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:33.391Z", "lastSuccess": "2026-10-23T03:22:33.391Z", "sourceCheckedAt": "2026-10-23T02:43:46.728Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-16058", "aliases": [], "title": "YayCurrency：脆弱性情報", "summary": "YayCurrency 3.3.5 未満の WordPress プラグインは、認証されていないユーザーがアクセスできる複数のマルチベンダー統合ハンドラに対して、権限や所有者の確認を行わないため、誰でも店舗の注文合計やベンダーの収益、残高台帳、出金履歴を ID を順に指定して取得できる。", "risk": "攻撃者が注文合計やベンダーの収益・残高・出金履歴といった財務情報を取得できるため、機密性が失われる。", "product": "YayCurrency", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "YayCurrency", "range": "< 3.3.5" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16058", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/d32d7086-9a43-4d98-80d7-18a3f82797bb/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16058", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:16.840Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.619Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthenticated users, allowing anyone to read the store's order totals and its vendors' earnings, balance ledgers, and withdrawal histories by iterating identifiers.", "sourceTitle": "YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "YayCurrency", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "3.3.5" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-16058", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "fetchedAt": "2026-10-23T02:43:46.619Z", "publishedAt": "2026-08-19T06:00:16.840Z", "modifiedAt": "2026-08-19T13:26:56.420Z", "state": "published", "provider": "WPScan", "title": "YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration", "descriptions": [ { "lang": "en", "value": "The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthenticated users, allowing anyone to read the store's order totals and its vendors' earnings, balance ledgers, and withdrawal histories by iterating identifiers.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "YayCurrency", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "3.3.5", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/d32d7086-9a43-4d98-80d7-18a3f82797bb/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"YayCurrency\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.3.5\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthenticated users, allowing anyone to read the store's order totals and its vendors' earnings, balance ledgers, and withdrawal histories by iterating identifiers.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-639 Authorization Bypass Through User-Controlled Key\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":5.3,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T13:26:56.420Z", "fetchedAt": "2026-10-23T02:43:46.619Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "YayCurrencyに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:34.827Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "8d7b28fc321f83a5d0a071c141f0cb905f652ec69a9c3c09b364a6565e06cde6", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "YayCurrency 3.3.5 未満の WordPress プラグインは、認証されていないユーザーがアクセスできる複数のマルチベンダー統合ハンドラに対して、権限や所有者の確認を行わないため、誰でも店舗の注文合計やベンダーの収益、残高台帳、出金履歴を ID を順に指定して取得できる。", "risk": "攻撃者が注文合計やベンダーの収益・残高・出金履歴といった財務情報を取得できるため、機密性が失われる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は YayCurrency プラグインのバージョンが 3.3.5 未満である WordPress 環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "影響を受けるのは、認証されていないユーザーがアクセスできるマルチベンダー統合ハンドラである。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：YayCurrency。影響ありとして記載：3.3.5未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「YayCurrency」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-16058", "https://wpscan.com/vulnerability/d32d7086-9a43-4d98-80d7-18a3f82797bb/", "https://nvd.nist.gov/vuln/detail/CVE-2026-16058" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16058", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/d32d7086-9a43-4d98-80d7-18a3f82797bb/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16058", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthenticated users, allowing anyone to read the store's order totals and its vendors' earnings, balance ledgers, and withdrawal histories by iterating identifiers.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "sourceField": "/containers/cna/title", "excerpt": "YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16058.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"YayCurrency\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.3.5\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-16058（YayCurrency）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は YayCurrency プラグインのバージョンが 3.3.5 未満である WordPress 環境。\n・影響を受けるのは、認証されていないユーザーがアクセスできるマルチベンダー統合ハンドラである。\n・公式の対象表：YayCurrency。影響ありとして記載：3.3.5未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-16058", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:34.827Z", "lastSuccess": "2026-10-23T03:22:34.827Z", "sourceCheckedAt": "2026-10-23T02:43:46.619Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-15253", "aliases": [], "title": "Easy Media Replace：ブラウザー上での不正な処理", "summary": "Easy Media Replace WordPressプラグインはバージョン0.2.0まで、メディアライブラリの一覧表示で添付ファイルのタイトルをHTML属性に出力する際にサニタイズやエスケープを行わない。そのため、Authorロール以上のユーザーが任意のウェブスクリプトを注入でき、メディアライブラリを閲覧する権限の高いユーザーのブラウザーでそのスクリプトが実行される。", "risk": "権限の高いユーザーのブラウザーで不正なスクリプトが実行され、ページ上で任意の操作が可能になる可能性がある。", "product": "Easy Media Replace", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "Easy Media Replace", "range": "<= 0.2.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15253", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/46eda528-3737-4c0d-bf72-df7fc6423907/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15253", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:16.637Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.431Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment title before outputting it in an HTML attribute in the media library list view, allowing users with the Author role and above to inject arbitrary web scripts that are executed in the browser of a higher privileged user who views the media library.", "sourceTitle": "Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Easy Media Replace", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "0.2.0" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-15253", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "fetchedAt": "2026-10-23T02:43:46.431Z", "publishedAt": "2026-08-19T06:00:16.637Z", "modifiedAt": "2026-08-19T13:26:18.694Z", "state": "published", "provider": "WPScan", "title": "Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title", "descriptions": [ { "lang": "en", "value": "The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment title before outputting it in an HTML attribute in the media library list view, allowing users with the Author role and above to inject arbitrary web scripts that are executed in the browser of a higher privileged user who views the media library.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Easy Media Replace", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "0.2.0", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/46eda528-3737-4c0d-bf72-df7fc6423907/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Easy Media Replace\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"0.2.0\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment title before outputting it in an HTML attribute in the media library list view, allowing users with the Author role and above to inject arbitrary web scripts that are executed in the browser of a higher privileged user who views the media library.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":6.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T13:26:18.694Z", "fetchedAt": "2026-10-23T02:43:46.431Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Easy Media Replaceにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:35.361Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "77149284158ddf51cbb40d93bbe9c32116099a988ae5bc2a530e542b888aec3a", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Easy Media Replace WordPressプラグインはバージョン0.2.0まで、メディアライブラリの一覧表示で添付ファイルのタイトルをHTML属性に出力する際にサニタイズやエスケープを行わない。そのため、Authorロール以上のユーザーが任意のウェブスクリプトを注入でき、メディアライブラリを閲覧する権限の高いユーザーのブラウザーでそのスクリプトが実行される。", "risk": "権限の高いユーザーのブラウザーで不正なスクリプトが実行され、ページ上で任意の操作が可能になる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Easy Media Replaceプラグインのバージョンが0.2.0以下であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "WordPressのメディアライブラリ一覧画面が使用されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "添付ファイルのタイトルがHTML属性として出力されること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者がAuthorロール以上の権限を持っていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "被害者がメディアライブラリを閲覧できる権限（例: 管理者等）を持っていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Easy Media Replace。影響ありとして記載：0.2.0以下の版。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Easy Media Replace」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-15253", "https://wpscan.com/vulnerability/46eda528-3737-4c0d-bf72-df7fc6423907/", "https://nvd.nist.gov/vuln/detail/CVE-2026-15253" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15253", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/46eda528-3737-4c0d-bf72-df7fc6423907/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15253", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment title before outputting it in an HTML attribute in the media library list view, allowing users with the Author role and above to inject arbitrary web scripts that are executed in the browser of a higher privileged user who views the media library.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "sourceField": "/containers/cna/title", "excerpt": "Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15253.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Easy Media Replace\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"0.2.0\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-15253（Easy Media Replace）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Easy Media Replaceプラグインのバージョンが0.2.0以下であること。\n・WordPressのメディアライブラリ一覧画面が使用されていること。\n・添付ファイルのタイトルがHTML属性として出力されること。\n・攻撃者がAuthorロール以上の権限を持っていること。\n・被害者がメディアライブラリを閲覧できる権限（例: 管理者等）を持っていること。\n・公式の対象表：Easy Media Replace。影響ありとして記載：0.2.0以下の版。個別に記されていない版の影響は、原資料でも未確定です。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-15253", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:35.361Z", "lastSuccess": "2026-10-23T03:22:35.361Z", "sourceCheckedAt": "2026-10-23T02:43:46.431Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-14861", "aliases": [], "title": "User Verification by PickPlugins：脆弱性情報", "summary": "User Verification by PickPlugins WordPress プラグイン（バージョン 2.0.47 まで）は、検証メール再送リクエストが対象ユーザーに対して許可されているかを確認せず、保護トークンをそのユーザーに結び付けてもいません。その結果、認証されていない攻撃者が任意のユーザー（管理者を含む）のメール認証状態をリセットし、アカウントからロックアウトできるという脆弱性があります。", "risk": "攻撃者により任意のユーザーが自分のアカウントにログインできなくなり、管理者でさえロックアウトされる可能性があります。", "product": "User Verification by PickPlugins", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "affected": [ { "product": "User Verification by PickPlugins", "range": "<= 2.0.47" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14861", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/4dff3634-4b4f-48e2-a8c9-dda7e2b682fd/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14861", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:16.169Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.334Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bind the protecting token to that user, allowing unauthenticated attackers to reset arbitrary users' email-verification status and lock them, including administrators, out of their accounts.", "sourceTitle": "User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "User Verification by PickPlugins", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "2.0.47" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-14861", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "fetchedAt": "2026-10-23T02:43:46.334Z", "publishedAt": "2026-08-19T06:00:16.169Z", "modifiedAt": "2026-08-19T13:15:28.942Z", "state": "published", "provider": "WPScan", "title": "User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR", "descriptions": [ { "lang": "en", "value": "The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bind the protecting token to that user, allowing unauthenticated attackers to reset arbitrary users' email-verification status and lock them, including administrators, out of their accounts.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "User Verification by PickPlugins", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "2.0.47", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/4dff3634-4b4f-48e2-a8c9-dda7e2b682fd/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"User Verification by PickPlugins\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"2.0.47\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bind the protecting token to that user, allowing unauthenticated attackers to reset arbitrary users' email-verification status and lock them, including administrators, out of their accounts.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-639 Authorization Bypass Through User-Controlled Key\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T13:15:28.942Z", "fetchedAt": "2026-10-23T02:43:46.334Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "User Verification by PickPluginsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:35.909Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "74c9190164aa7be00b357e4ad0eb066e4add81760686300dee136ef023401e99", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "User Verification by PickPlugins WordPress プラグイン（バージョン 2.0.47 まで）は、検証メール再送リクエストが対象ユーザーに対して許可されているかを確認せず、保護トークンをそのユーザーに結び付けてもいません。その結果、認証されていない攻撃者が任意のユーザー（管理者を含む）のメール認証状態をリセットし、アカウントからロックアウトできるという脆弱性があります。", "risk": "攻撃者により任意のユーザーが自分のアカウントにログインできなくなり、管理者でさえロックアウトされる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "WordPress に User Verification by PickPlugins プラグインがインストールされ、バージョンが 2.0.47 以下である環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "認証されていない外部から、任意のユーザー ID を指定して検証メール再送リクエストを送信できる状態。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：User Verification by PickPlugins。影響ありとして記載：2.0.47以下の版。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「User Verification by PickPlugins」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-14861", "https://wpscan.com/vulnerability/4dff3634-4b4f-48e2-a8c9-dda7e2b682fd/", "https://nvd.nist.gov/vuln/detail/CVE-2026-14861" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14861", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/4dff3634-4b4f-48e2-a8c9-dda7e2b682fd/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14861", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bind the protecting token to that user, allowing unauthenticated attackers to reset arbitrary users' email-verification status and lock them, including administrators, out of their accounts.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "sourceField": "/containers/cna/title", "excerpt": "User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14861.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"User Verification by PickPlugins\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"2.0.47\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-14861（User Verification by PickPlugins）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WordPress に User Verification by PickPlugins プラグインがインストールされ、バージョンが 2.0.47 以下である環境。\n・認証されていない外部から、任意のユーザー ID を指定して検証メール再送リクエストを送信できる状態。\n・公式の対象表：User Verification by PickPlugins。影響ありとして記載：2.0.47以下の版。個別に記されていない版の影響は、原資料でも未確定です。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-14861", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:35.909Z", "lastSuccess": "2026-10-23T03:22:35.909Z", "sourceCheckedAt": "2026-10-23T02:43:46.334Z", "errorCode": null }, "glossary": [] } } ], "total": 2187, "limit": 20, "offset": 420, "filters": { "product": "all", "type": "all", "q": "", "page": 22 }, "pagination": { "page": 22, "pageSize": 20, "totalPages": 110 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T15:17:49.690Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-23T14:17:50.525Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": "GitHub API取得上限に到達 (2026-10-23T15:20:07.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T15:17:49.690Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "error", "lastSuccess": "2026-10-23T14:17:50.525Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": "HTTP 524", "recordCount": 1, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T13:02:54.887Z 〜 2026-10-23T14:17:50.525Z、全製品の変更 240/240件まで確認、対象1件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T15:17:49.690Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }