{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-73342", "aliases": [], "title": "WP Multilang：ブラウザー上での不正な処理", "summary": "WordPress WP Multilangプラグインのバージョン2.4.31以下に、認証されていないユーザーが利用できるクロスサイトスクリプティング（XSS）の脆弱性があります。", "risk": "ページを表示した人のブラウザーで不正なスクリプトが実行される可能性があります。", "product": "WP Multilang", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.1, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "WP Multilang", "range": ">= n/a / <= 2.4.31 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 2.4.32から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "WordPress WP Multilangプラグインを最新バージョン（少なくとも2.4.32）に更新する。", "「CVE-2026-73342」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73342", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73342", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T14:00:08.590Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.440Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "sourceTitle": "WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Magazine3", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wp-multilang", "product": "WP Multilang", "versions": [ { "lessThanOrEqual": "2.4.31", "status": "affected", "version": "n/a", "versionType": "custom", "changes": [ { "at": "2.4.32", "status": "unaffected" } ] } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-73342", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "fetchedAt": "2026-10-23T02:43:50.440Z", "publishedAt": "2026-08-18T14:00:08.590Z", "modifiedAt": "2026-08-18T14:37:12.251Z", "state": "published", "provider": "Patchstack", "title": "WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability", "descriptions": [ { "lang": "en", "value": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Magazine3", "product": "WP Multilang", "sourcePath": "/containers/cna/affected/0", "packageName": "wp-multilang", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "2.4.31", "versionType": "custom", "status": "affected", "changes": [ { "at": "2.4.32", "status": "unaffected" } ] } ] } ], "solutions": [ { "lang": "en", "value": "Update the WordPress WP Multilang Plugin to the latest available version (at least 2.4.32).", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "baseScore": 7.1, "baseSeverity": "HIGH", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Magazine3\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-multilang\",\"product\":\"WP Multilang\",\"versions\":[{\"lessThanOrEqual\":\"2.4.31\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"2.4.32\",\"status\":\"unaffected\"}]}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update the WordPress WP Multilang Plugin to the latest available version (at least 2.4.32).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-79\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.1,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T14:37:12.251Z", "fetchedAt": "2026-10-23T02:43:50.440Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WP Multilangにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:48.853Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9de90164267fa7f4a97802eb25d5708e5fe62dc5ceebc7a1dd9bfc4f3197a420", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress WP Multilangプラグインのバージョン2.4.31以下に、認証されていないユーザーが利用できるクロスサイトスクリプティング（XSS）の脆弱性があります。", "risk": "ページを表示した人のブラウザーで不正なスクリプトが実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "WP Multilangプラグインのバージョンが2.4.31以下である場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：Magazine3 / WP Multilang。影響ありとして記載：2.4.31以下（原資料では開始版が未指定）。途中の変更：2.4.32から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WP Multilang」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "WordPress WP Multilangプラグインを最新バージョン（少なくとも2.4.32）に更新する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2026-73342」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-73342", "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73342" ] }, { "text": "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/", "https://wordpress.org/documentation/article/manage-plugins/" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-73342", "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73342" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73342", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73342", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Magazine3\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-multilang\",\"product\":\"WP Multilang\",\"versions\":[{\"lessThanOrEqual\":\"2.4.31\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"2.4.32\",\"status\":\"unaffected\"}]}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update the WordPress WP Multilang Plugin to the latest available version (at least 2.4.32).", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2026-73342（WP Multilang）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WP Multilangプラグインのバージョンが2.4.31以下である場合に影響を受けます。\n・公式の対象表：Magazine3 / WP Multilang。影響ありとして記載：2.4.31以下（原資料では開始版が未指定）。途中の変更：2.4.32から影響なし。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-73342", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:48.853Z", "lastSuccess": "2026-10-23T03:22:48.853Z", "sourceCheckedAt": "2026-10-23T02:43:50.440Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-66646", "aliases": [], "title": "WP Tab Widget：ブラウザー上での不正な処理", "summary": "WordPress 用 WP Tab Widget プラグインのバージョン 1.2.11 以下に、貢献者が XSS（ページを表示した人のブラウザーで不正な処理を動かされる）を実行できる脆弱性が存在します。", "risk": "攻撃者が悪意のあるスクリプトを埋め込むことで、ページを閲覧したユーザーのブラウザーで不正な処理が実行される可能性があります。", "product": "WP Tab Widget", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "WP Tab Widget", "range": ">= n/a / <= 1.2.11" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-66646", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-tab-widget/vulnerability/wordpress-wp-tab-widget-plugin-1-2-11-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66646", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T13:59:52.544Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.020Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.", "sourceTitle": "WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "MyThemeShop", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wp-tab-widget", "product": "WP Tab Widget", "versions": [ { "lessThanOrEqual": "1.2.11", "status": "affected", "version": "n/a", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-66646", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "fetchedAt": "2026-10-23T02:43:50.020Z", "publishedAt": "2026-08-18T13:59:52.544Z", "modifiedAt": "2026-08-18T19:48:22.350Z", "state": "published", "provider": "Patchstack", "title": "WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability", "descriptions": [ { "lang": "en", "value": "Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "MyThemeShop", "product": "WP Tab Widget", "sourcePath": "/containers/cna/affected/0", "packageName": "wp-tab-widget", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "1.2.11", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/wp-tab-widget/vulnerability/wordpress-wp-tab-widget-plugin-1-2-11-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"MyThemeShop\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-tab-widget\",\"product\":\"WP Tab Widget\",\"versions\":[{\"lessThanOrEqual\":\"1.2.11\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-79\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":6.5,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T19:48:22.350Z", "fetchedAt": "2026-10-23T02:43:50.020Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WP Tab Widgetにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:49.646Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e6bfdcf6e4b493dd5670f1022c69f3ae22f605949f9050b7decbbb0b5681f02b", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress 用 WP Tab Widget プラグインのバージョン 1.2.11 以下に、貢献者が XSS（ページを表示した人のブラウザーで不正な処理を動かされる）を実行できる脆弱性が存在します。", "risk": "攻撃者が悪意のあるスクリプトを埋め込むことで、ページを閲覧したユーザーのブラウザーで不正な処理が実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "WP Tab Widget プラグイン（ベンダー: MyThemeShop）のバージョン 1.2.11 以下が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：MyThemeShop / WP Tab Widget。影響ありとして記載：1.2.11以下（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WP Tab Widget」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-66646", "https://patchstack.com/database/wordpress/plugin/wp-tab-widget/vulnerability/wordpress-wp-tab-widget-plugin-1-2-11-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-66646" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-66646", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-tab-widget/vulnerability/wordpress-wp-tab-widget-plugin-1-2-11-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66646", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66646.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"MyThemeShop\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-tab-widget\",\"product\":\"WP Tab Widget\",\"versions\":[{\"lessThanOrEqual\":\"1.2.11\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-66646（WP Tab Widget）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WP Tab Widget プラグイン（ベンダー: MyThemeShop）のバージョン 1.2.11 以下が影響を受けます。\n・公式の対象表：MyThemeShop / WP Tab Widget。影響ありとして記載：1.2.11以下（原資料では開始版が未指定）。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-66646", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:49.646Z", "lastSuccess": "2026-10-23T03:22:49.646Z", "sourceCheckedAt": "2026-10-23T02:43:50.020Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-28567", "aliases": [], "title": "WP Sort Order：脆弱性情報", "summary": "認証されていない状態で、WP Sort Order プラグインのバージョン 1.3.5 以下において、アクセス制御が欠如しています。", "risk": "認証なしで攻撃者が機能にアクセスできる可能性があります。", "product": "WP Sort Order", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "WP Sort Order", "range": ">= n/a / <= 1.3.5" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-28567", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-sort-order/vulnerability/wordpress-wp-sort-order-plugin-1-3-5-broken-access-control-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28567", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T13:59:03.244Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:48.209Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.", "sourceTitle": "WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Fahad Mahmood", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wp-sort-order", "product": "WP Sort Order", "versions": [ { "lessThanOrEqual": "1.3.5", "status": "affected", "version": "n/a", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-28567", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "fetchedAt": "2026-10-23T02:43:48.209Z", "publishedAt": "2026-08-18T13:59:03.244Z", "modifiedAt": "2026-08-18T18:04:17.996Z", "state": "published", "provider": "Patchstack", "title": "WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability", "descriptions": [ { "lang": "en", "value": "Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Fahad Mahmood", "product": "WP Sort Order", "sourcePath": "/containers/cna/affected/0", "packageName": "wp-sort-order", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "1.3.5", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-862", "lang": "en", "description": "CWE-862 Missing Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/wp-sort-order/vulnerability/wordpress-wp-sort-order-plugin-1-3-5-broken-access-control-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Fahad Mahmood\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-sort-order\",\"product\":\"WP Sort Order\",\"versions\":[{\"lessThanOrEqual\":\"1.3.5\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-862\",\"description\":\"CWE-862 Missing Authorization\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.5,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T18:04:17.996Z", "fetchedAt": "2026-10-23T02:43:48.209Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WP Sort Orderに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:49.935Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e76e82de63fc2b17da9c9380f2642c5f58c059b50367ad3fa7f5f3c5092979d9", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "認証されていない状態で、WP Sort Order プラグインのバージョン 1.3.5 以下において、アクセス制御が欠如しています。", "risk": "認証なしで攻撃者が機能にアクセスできる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "WP Sort Order プラグインのバージョンが 1.3.5 以下であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "認証されていないユーザーが対象となります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Fahad Mahmood / WP Sort Order。影響ありとして記載：1.3.5以下（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WP Sort Order」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-28567", "https://patchstack.com/database/wordpress/plugin/wp-sort-order/vulnerability/wordpress-wp-sort-order-plugin-1-3-5-broken-access-control-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-28567" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-28567", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-sort-order/vulnerability/wordpress-wp-sort-order-plugin-1-3-5-broken-access-control-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28567", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28567.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Fahad Mahmood\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-sort-order\",\"product\":\"WP Sort Order\",\"versions\":[{\"lessThanOrEqual\":\"1.3.5\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-28567（WP Sort Order）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WP Sort Order プラグインのバージョンが 1.3.5 以下であること。\n・認証されていないユーザーが対象となります。\n・公式の対象表：Fahad Mahmood / WP Sort Order。影響ありとして記載：1.3.5以下（原資料では開始版が未指定）。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-28567", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:49.935Z", "lastSuccess": "2026-10-23T03:22:49.935Z", "sourceCheckedAt": "2026-10-23T02:43:48.209Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-75091", "aliases": [], "title": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzes：ブラウザー上での不正な処理", "summary": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzes プラグインは、入力のサニタイズや出力エスケープが不十分なため、バージョン5.7.1までのすべてのバージョンで保存型クロスサイトスクリプティングの脆弱性があります。これにより、認証されていない攻撃者が任意のウェブスクリプトをページに埋め込むことができ、ユーザーがそのページを閲覧したときにスクリプトが実行されます。", "risk": "ユーザーがページを開くと、不正なスクリプトが実行される可能性があります。", "product": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzes", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "Wordfence", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzes", "range": "<= 5.7.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-75091", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ae927b1-401f-4227-9d50-4adde8e95f24?source=cve", "label": "security@wordfence.com" }, { "url": "https://patchstack.com/database/wordpress/plugin/quillforms/vulnerability/wordpress-quill-forms-plugin-5-7-1-cross-site-scripting-xss-vulnerability", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75091", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T05:31:20.989Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.685Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "sourceTitle": "Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "mdmag", "product": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzes", "versions": [ { "version": "0", "status": "affected", "lessThanOrEqual": "5.7.1", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-75091", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "fetchedAt": "2026-10-23T02:43:50.685Z", "publishedAt": "2026-08-18T05:31:20.989Z", "modifiedAt": "2026-08-19T14:45:32.538Z", "state": "published", "provider": "Wordfence", "title": "Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting", "descriptions": [ { "lang": "en", "value": "The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "mdmag", "product": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzes", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "5.7.1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "Wordfence", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ae927b1-401f-4227-9d50-4adde8e95f24?source=cve", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/0" }, { "url": "https://patchstack.com/database/wordpress/plugin/quillforms/vulnerability/wordpress-quill-forms-plugin-5-7-1-cross-site-scripting-xss-vulnerability", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"mdmag\",\"product\":\"Quill Forms | Conversational Multi Step Forms, Surveys & quizzes\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"5.7.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"cweId\":\"CWE-79\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T14:45:32.538Z", "fetchedAt": "2026-10-23T02:43:50.685Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzesにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:51.718Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ae957f65c916873147917390f8f4c2cacbcd2bbbed9417d223030f05db9c2f4f", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Quill Forms | Conversational Multi Step Forms, Surveys & quizzes プラグインは、入力のサニタイズや出力エスケープが不十分なため、バージョン5.7.1までのすべてのバージョンで保存型クロスサイトスクリプティングの脆弱性があります。これにより、認証されていない攻撃者が任意のウェブスクリプトをページに埋め込むことができ、ユーザーがそのページを閲覧したときにスクリプトが実行されます。", "risk": "ユーザーがページを開くと、不正なスクリプトが実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象プラグインは WordPress 用の Quill Forms | Conversational Multi Step Forms, Surveys & quizzes です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるのはバージョン5.7.1 以下のすべてのバージョンです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "攻撃者は認証されていない状態でもスクリプトを注入できます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：mdmag / Quill Forms | Conversational Multi Step Forms, Surveys & quizzes。影響ありとして記載：5.7.1以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Quill Forms | Conversational Multi Step Forms, Surveys & quizzes」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-75091", "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ae927b1-401f-4227-9d50-4adde8e95f24?source=cve", "https://patchstack.com/database/wordpress/plugin/quillforms/vulnerability/wordpress-quill-forms-plugin-5-7-1-cross-site-scripting-xss-vulnerability", "https://nvd.nist.gov/vuln/detail/CVE-2026-75091" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-75091", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ae927b1-401f-4227-9d50-4adde8e95f24?source=cve", "label": "security@wordfence.com" }, { "url": "https://patchstack.com/database/wordpress/plugin/quillforms/vulnerability/wordpress-quill-forms-plugin-5-7-1-cross-site-scripting-xss-vulnerability", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75091", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "sourceField": "/containers/cna/title", "excerpt": "Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75091.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"mdmag\",\"product\":\"Quill Forms | Conversational Multi Step Forms, Surveys & quizzes\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"5.7.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-75091（Quill Forms | Conversational Multi Step Forms, Surveys & quizzes）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象プラグインは WordPress 用の Quill Forms | Conversational Multi Step Forms, Surveys & quizzes です。\n・影響を受けるのはバージョン5.7.1 以下のすべてのバージョンです。\n・攻撃者は認証されていない状態でもスクリプトを注入できます。\n・公式の対象表：mdmag / Quill Forms | Conversational Multi Step Forms, Surveys & quizzes。影響ありとして記載：5.7.1以下の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-75091", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:51.718Z", "lastSuccess": "2026-10-23T03:22:51.718Z", "sourceCheckedAt": "2026-10-23T02:43:50.685Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-15748", "aliases": [], "title": "Forminator Forms – Contact Form, Payment Form & Custom Form Builder：コード実行", "summary": "Forminator Forms プラグイン（WordPress 用）は、handle_file_upload 関数におけるファイル種別検証が不十分で、危険拡張子ブロックリストが正確なキー一致のみでチェックされます。このブロックリストは、パイプで区切った代替 MIME タイプキーによって回避可能です。さらに、公開された送信ハンドラが攻撃者が操作したアップロードフィールド設定を信頼し、偽装した Select フィールドの値で注入されます。その結果、認証されていない攻撃者が実行可能なファイルを含む任意のファイルをアップロードでき、リモートコード実行が可能になります。", "risk": "実行可能なファイルがアップロードされる可能性があり、サーバー上で攻撃者のコードが実行される恐れがあります。", "product": "Forminator Forms – Contact Form, Payment Form & Custom Form Builder", "category": "wordpress", "component": "plugin", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "Wordfence", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Forminator Forms – Contact Form, Payment Form & Custom Form Builder", "range": "<= 1.56.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15748", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/263ac05d-f1ca-46e3-a43e-3b45eb8066d4?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/fields/upload.php#L552", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L2767", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L738", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/helpers/helper-fields.php#L3425", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/abstracts/abstract-class-field.php#L2308", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/admin/classes/class-admin-ajax.php#L1196", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15748", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T05:31:20.458Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:46.538Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, where the dangerous-extension blocklist performs exact-key matching that is bypassed by pipe-alternative MIME type keys, combined with a public submission handler that trusts attacker-controlled upload field configuration injected via a forged Select field value. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.", "sourceTitle": "Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "wpmudev", "product": "Forminator Forms – Contact Form, Payment Form & Custom Form Builder", "versions": [ { "version": "0", "status": "affected", "lessThanOrEqual": "1.56.1", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-15748", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "fetchedAt": "2026-10-23T02:43:46.538Z", "publishedAt": "2026-08-18T05:31:20.458Z", "modifiedAt": "2026-08-18T15:28:02.730Z", "state": "published", "provider": "Wordfence", "title": "Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration", "descriptions": [ { "lang": "en", "value": "The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, where the dangerous-extension blocklist performs exact-key matching that is bypassed by pipe-alternative MIME type keys, combined with a public submission handler that trusts attacker-controlled upload field configuration injected via a forged Select field value. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "wpmudev", "product": "Forminator Forms – Contact Form, Payment Form & Custom Form Builder", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "1.56.1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-434", "lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "Wordfence", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/263ac05d-f1ca-46e3-a43e-3b45eb8066d4?source=cve", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/0" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/fields/upload.php#L552", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/1" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L2767", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/2" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L738", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/3" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/helpers/helper-fields.php#L3425", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/4" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/abstracts/abstract-class-field.php#L2308", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/5" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/admin/classes/class-admin-ajax.php#L1196", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/6" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"wpmudev\",\"product\":\"Forminator Forms – Contact Form, Payment Form & Custom Form Builder\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"1.56.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, where the dangerous-extension blocklist performs exact-key matching that is bypassed by pipe-alternative MIME type keys, combined with a public submission handler that trusts attacker-controlled upload field configuration injected via a forged Select field value. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-434 Unrestricted Upload of File with Dangerous Type\",\"cweId\":\"CWE-434\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T15:28:02.730Z", "fetchedAt": "2026-10-23T02:43:46.538Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "Forminator Forms – Contact Form, Payment Form & Custom Form Builderにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:51.820Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0eebf010d79a5b8a8d71cee6dac9f795cc8555f944ba3d5ff4a32484513669f1", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Forminator Forms プラグイン（WordPress 用）は、handle_file_upload 関数におけるファイル種別検証が不十分で、危険拡張子ブロックリストが正確なキー一致のみでチェックされます。このブロックリストは、パイプで区切った代替 MIME タイプキーによって回避可能です。さらに、公開された送信ハンドラが攻撃者が操作したアップロードフィールド設定を信頼し、偽装した Select フィールドの値で注入されます。その結果、認証されていない攻撃者が実行可能なファイルを含む任意のファイルをアップロードでき、リモートコード実行が可能になります。", "risk": "実行可能なファイルがアップロードされる可能性があり、サーバー上で攻撃者のコードが実行される恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "WordPress 用 Forminator Forms プラグインのバージョン 1.56.1 以下すべてが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "認証されていない攻撃者が、偽装した Select フィールドの値でアップロードフィールド設定を操作し、任意のファイルをアップロードできます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "handle_file_upload 関数のファイル種別検証が不十分で、危険拡張子ブロックリストが正確なキー一致のみでチェックされ、パイプで区切った代替 MIME タイプキーに回避されます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：wpmudev / Forminator Forms – Contact Form, Payment Form & Custom Form Builder。影響ありとして記載：1.56.1以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Forminator Forms – Contact Form, Payment Form & Custom Form Builder」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-15748", "https://www.wordfence.com/threat-intel/vulnerabilities/id/263ac05d-f1ca-46e3-a43e-3b45eb8066d4?source=cve", "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/fields/upload.php#L552", "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L2767", "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L738", "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/helpers/helper-fields.php#L3425", "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/abstracts/abstract-class-field.php#L2308", "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/admin/classes/class-admin-ajax.php#L1196", "https://nvd.nist.gov/vuln/detail/CVE-2026-15748" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15748", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/263ac05d-f1ca-46e3-a43e-3b45eb8066d4?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/fields/upload.php#L552", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L2767", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/modules/custom-forms/front/front-action.php#L738", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/helpers/helper-fields.php#L3425", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/library/abstracts/abstract-class-field.php#L2308", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.55.1/admin/classes/class-admin-ajax.php#L1196", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15748", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, where the dangerous-extension blocklist performs exact-key matching that is bypassed by pipe-alternative MIME type keys, combined with a public submission handler that trusts attacker-controlled upload field configuration injected via a forged Select field value. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "sourceField": "/containers/cna/title", "excerpt": "Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15748.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"wpmudev\",\"product\":\"Forminator Forms – Contact Form, Payment Form & Custom Form Builder\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"1.56.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-15748（Forminator Forms – Contact Form, Payment Form & Custom Form Builder）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WordPress 用 Forminator Forms プラグインのバージョン 1.56.1 以下すべてが影響を受けます。\n・認証されていない攻撃者が、偽装した Select フィールドの値でアップロードフィールド設定を操作し、任意のファイルをアップロードできます。\n・handle_file_upload 関数のファイル種別検証が不十分で、危険拡張子ブロックリストが正確なキー一致のみでチェックされ、パイプで区切った代替 MIME タイプキーに回避されます。\n・公式の対象表：wpmudev / Forminator Forms – Contact Form, Payment Form & Custom Form Builder。影響ありとして記載：1.56.1以下の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-15748", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:51.820Z", "lastSuccess": "2026-10-23T03:22:51.820Z", "sourceCheckedAt": "2026-10-23T02:43:46.538Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-11801", "aliases": [], "title": "WPAdverts – Classifieds Plugin：情報の漏えい", "summary": "WPAdverts – Classifieds Plugin のバージョン 2.3.2 以下すべてで、認可チェックが欠如しているため、認証されていない攻撃者が classifieds-types REST エンドポイントを通じて内部サイト設定データ（登録された投稿タイプ、ラベル、関連タクソノミー、フォームスキーマのメタデータ、連絡オプション、カスタムフィールドのメタキー）を取得できる。", "risk": "認証されていない攻撃者により、サイトの内部設定情報が外部に漏洩する可能性がある。", "product": "WPAdverts – Classifieds Plugin", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "Wordfence", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "WPAdverts – Classifieds Plugin", "range": "<= 2.3.2" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-11801", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/37bb8d68-dd87-437a-80e5-e99e93dc55b6?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L50", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L13", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.3/includes/class-rest-blocks.php#L49", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3635095%40wpadverts%2Ftrunk&old=3557928%40wpadverts%2Ftrunk", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11801", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T02:27:03.634Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:45.871Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve internal site configuration data exposed by the classifieds-types REST endpoint, including registered post types, labels, associated taxonomies, form scheme metadata, contact options, and custom field meta keys.", "sourceTitle": "WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "gwin", "product": "WPAdverts – Classifieds Plugin", "versions": [ { "version": "0", "status": "affected", "lessThanOrEqual": "2.3.2", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-11801", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "fetchedAt": "2026-10-23T02:43:45.871Z", "publishedAt": "2026-08-18T02:27:03.634Z", "modifiedAt": "2026-08-18T19:20:32.110Z", "state": "published", "provider": "Wordfence", "title": "WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint", "descriptions": [ { "lang": "en", "value": "The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve internal site configuration data exposed by the classifieds-types REST endpoint, including registered post types, labels, associated taxonomies, form scheme metadata, contact options, and custom field meta keys.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "gwin", "product": "WPAdverts – Classifieds Plugin", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "2.3.2", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-862", "lang": "en", "description": "CWE-862 Missing Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "Wordfence", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/37bb8d68-dd87-437a-80e5-e99e93dc55b6?source=cve", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/0" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L50", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/1" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L13", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/2" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.3/includes/class-rest-blocks.php#L49", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/3" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3635095%40wpadverts%2Ftrunk&old=3557928%40wpadverts%2Ftrunk", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/4" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"gwin\",\"product\":\"WPAdverts – Classifieds Plugin\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"2.3.2\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve internal site configuration data exposed by the classifieds-types REST endpoint, including registered post types, labels, associated taxonomies, form scheme metadata, contact options, and custom field meta keys.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-862 Missing Authorization\",\"cweId\":\"CWE-862\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T19:20:32.110Z", "fetchedAt": "2026-10-23T02:43:45.871Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WPAdverts – Classifieds Pluginに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:53.191Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "dace69212d39861fa22cf42de16cc29226c2e7e24de09a01e8f942a4c5533f67", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WPAdverts – Classifieds Plugin のバージョン 2.3.2 以下すべてで、認可チェックが欠如しているため、認証されていない攻撃者が classifieds-types REST エンドポイントを通じて内部サイト設定データ（登録された投稿タイプ、ラベル、関連タクソノミー、フォームスキーマのメタデータ、連絡オプション、カスタムフィールドのメタキー）を取得できる。", "risk": "認証されていない攻撃者により、サイトの内部設定情報が外部に漏洩する可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "WPAdverts – Classifieds Plugin のバージョン 2.3.2 以下（0 から 2.3.2 まで）すべてが影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：gwin / WPAdverts – Classifieds Plugin。影響ありとして記載：2.3.2以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WPAdverts – Classifieds Plugin」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-11801", "https://www.wordfence.com/threat-intel/vulnerabilities/id/37bb8d68-dd87-437a-80e5-e99e93dc55b6?source=cve", "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L50", "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L13", "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.3/includes/class-rest-blocks.php#L49", "https://plugins.trac.wordpress.org/changeset?reponame=&new=3635095%40wpadverts%2Ftrunk&old=3557928%40wpadverts%2Ftrunk", "https://nvd.nist.gov/vuln/detail/CVE-2026-11801" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-11801", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/37bb8d68-dd87-437a-80e5-e99e93dc55b6?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L50", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.2/includes/class-rest-blocks.php#L13", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpadverts/tags/2.3.3/includes/class-rest-blocks.php#L49", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3635095%40wpadverts%2Ftrunk&old=3557928%40wpadverts%2Ftrunk", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11801", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "sourceField": "/containers/cna/title", "excerpt": "WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve internal site configuration data exposed by the classifieds-types REST endpoint, including registered post types, labels, associated taxonomies, form scheme metadata, contact options, and custom field meta keys.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11801.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"gwin\",\"product\":\"WPAdverts – Classifieds Plugin\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"2.3.2\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-11801（WPAdverts – Classifieds Plugin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WPAdverts – Classifieds Plugin のバージョン 2.3.2 以下（0 から 2.3.2 まで）すべてが影響を受ける。\n・公式の対象表：gwin / WPAdverts – Classifieds Plugin。影響ありとして記載：2.3.2以下の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-11801", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:53.191Z", "lastSuccess": "2026-10-23T03:22:53.191Z", "sourceCheckedAt": "2026-10-23T02:43:45.871Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-33824", "aliases": [], "title": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2：コード実行", "summary": "Windows IKE 拡張機能におけるダブルフリーの脆弱性により、認可されていない攻撃者がネットワーク経由でコードを実行できるリモートコード実行脆弱性です。", "risk": "攻撃者がサーバーや機器に任意のコードを実行させられる可能性があります。", "product": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.9060（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.8644（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19044.0 / < 10.0.19044.7184（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.7184（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.6936（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.6936（環境: x64-based Systems）" }, { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.8246（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 Version 25H2", "range": ">= 10.0.26200.0 / < 10.0.26200.8246（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 26H1", "range": ">= 10.0.28000.0 / < 10.0.28000.1836（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.9060（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.9060（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.8644（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.8644（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.5020（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.2274（環境: x64-based Systems）" }, { "product": "Windows Server 2025", "range": ">= 10.0.26100.0 / < 10.0.26100.32690（環境: x64-based Systems）" }, { "product": "Windows Server 2025 (Server Core installation)", "range": ">= 10.0.26100.0 / < 10.0.26100.32690（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33824", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824", "label": "Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33824", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-14T16:58:45.469Z", "modifiedAt": "2026-10-15T15:53:44.194Z", "fetchedAt": "2026-10-23T02:43:48.361Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9060", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.8644", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19044.0", "lessThan": "10.0.19044.7184", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.7184", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.6936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.6936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.8246", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26200.0", "lessThan": "10.0.26200.8246", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.28000.0", "lessThan": "10.0.28000.1836", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9060", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9060", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.8644", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.8644", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.5020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.2274", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.32690", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.32690", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-33824", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "fetchedAt": "2026-10-23T02:43:48.361Z", "publishedAt": "2026-04-14T16:58:45.469Z", "modifiedAt": "2026-10-15T15:53:44.194Z", "state": "published", "provider": "microsoft", "title": "Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9060", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.8644", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.19044.0", "lessThan": "10.0.19044.7184", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.7184", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.6936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.6936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.8246", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.26200.0", "lessThan": "10.0.26200.8246", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "sourcePath": "/containers/cna/affected/8", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.28000.0", "lessThan": "10.0.28000.1836", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/9", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9060", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9060", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.8644", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.8644", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.5020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.2274", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.32690", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.32690", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-415", "lang": "en-US", "description": "CWE-415: Double Free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824", "label": "Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33824", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9060\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.8644\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7184\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7184\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.6936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.6936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.8246\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.8246\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.1836\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9060\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9060\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.8644\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.8644\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.2274\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.32690\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.32690\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-415: Double Free\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-415\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T15:53:44.194Z", "fetchedAt": "2026-10-23T02:43:48.361Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-18T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:53.358Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "cd32eb493fc81f9515f2d96e354940c97c6dca27c33489656f090f26114e5d5e", "sourceModifiedAt": "2026-10-15T15:53:44.194Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows IKE 拡張機能におけるダブルフリーの脆弱性により、認可されていない攻撃者がネットワーク経由でコードを実行できるリモートコード実行脆弱性です。", "risk": "攻撃者がサーバーや機器に任意のコードを実行させられる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Windows 10 Version 1607、Windows 10 Version 1809、Windows 10 Version 21H2、Windows 10 Version 22H2 は、32 ビット、x64、ARM64（該当するもの）システムで、バージョン 10.0.14393.0 以上 10.0.14393.9060 未満、10.0.17763.0 以上 10.0.17763.8644 未満、10.0.19044.0 以上 10.0.19044.7184 未満、10.0.19045.0 以上 10.0.19045.7184 未満の範囲で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E3", "E4", "E5", "E6", "E1" ] }, { "text": "Windows 11 version 23H2（ARM64）、Windows 11 Version 23H2（x64）、Windows 11 Version 24H2（ARM64、x64）、Windows 11 Version 25H2（ARM64、x64）、Windows 11 version 26H1（ARM64、x64）は、該当プラットフォームで、バージョン 10.0.22631.0 以上 10.0.22631.6936 未満、10.0.26100.0 以上 10.0.26100.8246 未満、10.0.26200.0 以上 10.0.26200.8246 未満、10.0.28000.0 以上 10.0.28000.1836 未満の範囲で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E7", "E8", "E9", "E10", "E11", "E1" ] }, { "text": "Windows Server 2016（x64）および Server Core インストール版、Windows Server 2019（x64）および Server Core インストール版、Windows Server 2022（x64）および Windows Server 2022 23H2 Edition（Server Core、x64）、Windows Server 2025（x64）および Server Core インストール版は、バージョン 10.0.14393.0 以上 10.0.14393.9060 未満、10.0.17763.0 以上 10.0.17763.8644 未満、10.0.20348.0 以上 10.0.20348.5020 未満、10.0.25398.0 以上 10.0.25398.2274 未満、10.0.26100.0 以上 10.0.26100.32690 未満の範囲で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E12", "E13", "E14", "E15", "E16", "E17", "E18", "E19" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9060未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.8644未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7184未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7184未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.6936未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.6936未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.8246未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.8246未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.1836未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9060未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9060未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.8644未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.8644未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5020未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.2274未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.32690未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.32690未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E19" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824" ], "evidenceIds": [ "E20" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33824", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-33824" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-33824", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-33824" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33824", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-33824" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33824", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824", "label": "Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33824", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9060\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.8644\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7184\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7184\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.6936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.6936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.8246\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.8246\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.1836\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9060\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9060\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.8644\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.8644\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.2274\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.32690\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33824.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.32690\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-33824\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-33824（Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 Version 1607、Windows 10 Version 1809、Windows 10 Version 21H2、Windows 10 Version 22H2 は、32 ビット、x64、ARM64（該当するもの）システムで、バージョン 10.0.14393.0 以上 10.0.14393.9060 未満、10.0.17763.0 以上 10.0.17763.8644 未満、10.0.19044.0 以上 10.0.19044.7184 未満、10.0.19045.0 以上 10.0.19045.7184 未満の範囲で影響を受けます。\n・Windows 11 version 23H2（ARM64）、Windows 11 Version 23H2（x64）、Windows 11 Version 24H2（ARM64、x64）、Windows 11 Version 25H2（ARM64、x64）、Windows 11 version 26H1（ARM64、x64）は、該当プラットフォームで、バージョン 10.0.22631.0 以上 10.0.22631.6936 未満、10.0.26100.0 以上 10.0.26100.8246 未満、10.0.26200.0 以上 10.0.26200.8246 未満、10.0.28000.0 以上 10.0.28000.1836 未満の範囲で影響を受けます。\n・Windows Server 2016（x64）および Server Core インストール版、Windows Server 2019（x64）および Server Core インストール版、Windows Server 2022（x64）および Windows Server 2022 23H2 Edition（Server Core、x64）、Windows Server 2025（x64）および Server Core インストール版は、バージョン 10.0.14393.0 以上 10.0.14393.9060 未満、10.0.17763.0 以上 10.0.17763.8644 未満、10.0.20348.0 以上 10.0.20348.5020 未満、10.0.25398.0 以上 10.0.25398.2274 未満、10.0.26100.0 以上 10.0.26100.32690 未満の範囲で影響を受けます。\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9060未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.8644未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7184未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7184未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.6936未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.6936未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.8246未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.8246未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.1836未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9060未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9060未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.8644未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.8644未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5020未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.2274未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.32690未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.32690未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-33824", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:53.358Z", "lastSuccess": "2026-10-23T03:22:53.358Z", "sourceCheckedAt": "2026-10-23T02:43:48.361Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-55040", "aliases": [], "title": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition：脆弱性情報", "summary": "Microsoft Office SharePoint の認証が弱く、認可されていない攻撃者がネットワーク越しにセキュリティ機能を回避できる。", "risk": "攻撃者がセキュリティ機能を回避できる。", "product": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition", "category": "windows", "component": "package", "severity": "critical", "cvss": 9.1, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C", "affected": [ { "product": "Microsoft SharePoint Enterprise Server 2016", "range": ">= 16.0.0 / < 16.0.5561.1001（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server 2019", "range": ">= 16.0.0 / < 16.0.10417.20175（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server Subscription Edition", "range": ">= 16.0.0 / < 16.0.19725.20434（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-55040", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55040", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-07-14T17:09:00.641Z", "modifiedAt": "2026-10-08T18:16:58.104Z", "fetchedAt": "2026-10-23T02:43:49.492Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft SharePoint Server Security Feature Bypass Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.5561.1001", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.10417.20175", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.19725.20434", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-55040", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "fetchedAt": "2026-10-23T02:43:49.492Z", "publishedAt": "2026-07-14T17:09:00.641Z", "modifiedAt": "2026-10-08T18:16:58.104Z", "state": "published", "provider": "microsoft", "title": "Microsoft SharePoint Server Security Feature Bypass Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "16.0.0", "lessThan": "16.0.5561.1001", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "16.0.0", "lessThan": "16.0.10417.20175", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "16.0.0", "lessThan": "16.0.19725.20434", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1390", "lang": "en-US", "description": "CWE-1390: Weak Authentication", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C", "baseScore": 9.1, "baseSeverity": "CRITICAL", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040", "label": "Microsoft SharePoint Server Security Feature Bypass Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040/", "label": "CISA-ADP", "tags": [ "technical-description" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/sfewer-r7/CVE-2026-55040", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55040", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5561.1001\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10417.20175\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.19725.20434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-1390: Weak Authentication\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-1390\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.1,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-08T18:16:58.104Z", "fetchedAt": "2026-10-23T02:43:49.492Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-18T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Editionに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:53.551Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b10d861f2913c98568e418f39fe715bc4f550ee5dd0a0a4c3d6b2646a820efed", "sourceModifiedAt": "2026-10-08T18:16:58.104Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Office SharePoint の認証が弱く、認可されていない攻撃者がネットワーク越しにセキュリティ機能を回避できる。", "risk": "攻撃者がセキュリティ機能を回避できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Microsoft SharePoint Enterprise Server 2016 の x64 ベースシステムで、バージョン 16.0.0 以上かつ 16.0.5561.1001 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Microsoft SharePoint Server 2019 の x64 ベースシステムで、バージョン 16.0.0 以上かつ 16.0.10417.20175 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Microsoft SharePoint Server Subscription Edition の x64 ベースシステムで、バージョン 16.0.0 以上かつ 16.0.19725.20434 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "認証が弱く、認可されていない攻撃者がネットワーク越しにセキュリティ機能を回避できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5561.1001未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10417.20175未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.19725.20434未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-55040", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-55040" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-55040", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-55040" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-55040", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-55040" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-55040", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55040", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft SharePoint Server Security Feature Bypass Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5561.1001\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10417.20175\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55040.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.19725.20434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-55040\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-55040（Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft SharePoint Enterprise Server 2016 の x64 ベースシステムで、バージョン 16.0.0 以上かつ 16.0.5561.1001 未満は影響を受ける。\n・Microsoft SharePoint Server 2019 の x64 ベースシステムで、バージョン 16.0.0 以上かつ 16.0.10417.20175 未満は影響を受ける。\n・Microsoft SharePoint Server Subscription Edition の x64 ベースシステムで、バージョン 16.0.0 以上かつ 16.0.19725.20434 未満は影響を受ける。\n・認証が弱く、認可されていない攻撃者がネットワーク越しにセキュリティ機能を回避できる。\n・公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5561.1001未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10417.20175未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.19725.20434未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-55040", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:53.551Z", "lastSuccess": "2026-10-23T03:22:53.551Z", "sourceCheckedAt": "2026-10-23T02:43:49.492Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-59310", "aliases": [], "title": "Cloud Foundation / vSphere Foundation / vCenter / Telco Cloud Infrastructure / Telco Cloud Platform：コード実行", "summary": "VMware vCenter の Syslog サーバーにディレクトリトラバーサルの脆弱性があり、ネットワークから vCenter にアクセスできる攻撃者はこの問題を利用して任意のコードを実行できる可能性があります。", "risk": "攻撃者が任意のコードを実行できる可能性がある。", "product": "Cloud Foundation / vSphere Foundation / vCenter / Telco Cloud Infrastructure / Telco Cloud Platform", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "vmware", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Cloud Foundation", "range": "9.1.x.x" }, { "product": "Cloud Foundation", "range": "9.0.x.x" }, { "product": "Cloud Foundation", "range": "5.x" }, { "product": "vSphere Foundation", "range": "9.1.x.x" }, { "product": "vSphere Foundation", "range": "9.0.x.x" }, { "product": "vCenter", "range": ">= 9.1.x.x / < 9.1.0.0300" }, { "product": "vCenter", "range": ">= 9.0.x.x / < 9.0.2.0100" }, { "product": "vCenter", "range": ">= 8.0 / < 8.0 U3k" }, { "product": "Telco Cloud Infrastructure", "range": "3.0" }, { "product": "Telco Cloud Platform", "range": "5.1.x" }, { "product": "Telco Cloud Platform", "range": "5.0.x" }, { "product": "Telco Cloud Platform", "range": "4.x" }, { "product": "Telco Cloud Platform", "range": "3.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "label": "CVE：vmware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-59310", "label": "CVE公式レコード" }, { "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59310", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-07-30T12:19:25.296Z", "modifiedAt": "2026-09-12T03:55:18.047Z", "fetchedAt": "2026-10-23T02:43:49.686Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.", "sourceTitle": "vCenter directory-traversal vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "VMware", "product": "Cloud Foundation", "versions": [ { "status": "affected", "version": "9.1.x.x" }, { "status": "affected", "version": "9.0.x.x" }, { "status": "affected", "version": "5.x" } ], "defaultStatus": "unaffected" }, { "vendor": "VMware", "product": "vSphere Foundation", "versions": [ { "status": "affected", "version": "9.1.x.x" }, { "status": "affected", "version": "9.0.x.x" } ], "defaultStatus": "unaffected" }, { "vendor": "VMware", "product": "vCenter", "versions": [ { "status": "affected", "version": "9.1.x.x", "lessThan": "9.1.0.0300", "versionType": "custom" }, { "status": "affected", "version": "9.0.x.x", "lessThan": "9.0.2.0100", "versionType": "custom" }, { "status": "affected", "version": "8.0", "lessThan": "8.0 U3k", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "VMware", "product": "Telco Cloud Infrastructure", "versions": [ { "status": "affected", "version": "3.0" } ], "defaultStatus": "unaffected" }, { "vendor": "VMware", "product": "Telco Cloud Platform", "versions": [ { "status": "affected", "version": "5.1.x" }, { "status": "affected", "version": "5.0.x" }, { "status": "affected", "version": "4.x" }, { "status": "affected", "version": "3.0" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-59310", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "fetchedAt": "2026-10-23T02:43:49.686Z", "publishedAt": "2026-07-30T12:19:25.296Z", "modifiedAt": "2026-09-12T03:55:18.047Z", "state": "published", "provider": "vmware", "title": "vCenter directory-traversal vulnerability", "descriptions": [ { "lang": "en", "value": "VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "VMware", "product": "Cloud Foundation", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.1.x.x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.0.x.x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "5.x", "status": "affected" } ] }, { "vendor": "VMware", "product": "vSphere Foundation", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "9.1.x.x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "9.0.x.x", "status": "affected" } ] }, { "vendor": "VMware", "product": "vCenter", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "9.1.x.x", "lessThan": "9.1.0.0300", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "9.0.x.x", "lessThan": "9.0.2.0100", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/2", "version": "8.0", "lessThan": "8.0 U3k", "versionType": "custom", "status": "affected" } ] }, { "vendor": "VMware", "product": "Telco Cloud Infrastructure", "sourcePath": "/containers/cna/affected/3", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "3.0", "status": "affected" } ] }, { "vendor": "VMware", "product": "Telco Cloud Platform", "sourcePath": "/containers/cna/affected/4", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "5.1.x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/4/versions/1", "version": "5.0.x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/4/versions/2", "version": "4.x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/4/versions/3", "version": "3.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "vmware", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017", "label": "vmware", "tags": [], "provider": "vmware", "sourcePath": "/containers/cna/references/0" }, { "url": "https://medium.com/@quirso_de/global-exploitation-of-cve-2026-59310-by-suspected-chinese-nexus-apt-related-cve-2026-59309-443a79e1466d", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://medium.com/@quirso_de/active-exploitation-of-cve-2026-59310-361-victim-ips-across-47-countries-9783187cc6ff", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59310", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"VMware\",\"product\":\"Cloud Foundation\",\"versions\":[{\"status\":\"affected\",\"version\":\"9.1.x.x\"},{\"status\":\"affected\",\"version\":\"9.0.x.x\"},{\"status\":\"affected\",\"version\":\"5.x\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"VMware\",\"product\":\"vSphere Foundation\",\"versions\":[{\"status\":\"affected\",\"version\":\"9.1.x.x\"},{\"status\":\"affected\",\"version\":\"9.0.x.x\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"VMware\",\"product\":\"vCenter\",\"versions\":[{\"status\":\"affected\",\"version\":\"9.1.x.x\",\"lessThan\":\"9.1.0.0300\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"9.0.x.x\",\"lessThan\":\"9.0.2.0100\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"8.0\",\"lessThan\":\"8.0 U3k\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"VMware\",\"product\":\"Telco Cloud Infrastructure\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.0\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"VMware\",\"product\":\"Telco Cloud Platform\",\"versions\":[{\"status\":\"affected\",\"version\":\"5.1.x\"},{\"status\":\"affected\",\"version\":\"5.0.x\"},{\"status\":\"affected\",\"version\":\"4.x\"},{\"status\":\"affected\",\"version\":\"3.0\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-12T03:55:18.047Z", "fetchedAt": "2026-10-23T02:43:49.686Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-18T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Cloud Foundation / vSphere Foundation / vCenter / Telco Cloud Infrastructure / Telco Cloud Platformにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:54.707Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5164e8c56fb4457c257c46c3361eadf8654d07437a7534e072309cce10ebbc13", "sourceModifiedAt": "2026-09-12T03:55:18.047Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "VMware vCenter の Syslog サーバーにディレクトリトラバーサルの脆弱性があり、ネットワークから vCenter にアクセスできる攻撃者はこの問題を利用して任意のコードを実行できる可能性があります。", "risk": "攻撃者が任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Cloud Foundation のバージョン 9.1.x.x、9.0.x.x、5.x が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "vSphere Foundation のバージョン 9.1.x.x、9.0.x.x が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "vCenter のバージョン 9.1.x.x（バージョン < 9.1.0.0300）、9.0.x.x（バージョン < 9.0.2.0100）、8.0（バージョン < 8.0 U3k）が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "Telco Cloud Infrastructure のバージョン 3.0 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E6", "E2" ] }, { "text": "Telco Cloud Platform のバージョン 5.1.x、5.0.x、4.x、3.0 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E7", "E2" ] }, { "text": "公式の対象表：VMware / Cloud Foundation。影響ありとして記載：9.1.x.x。影響ありとして記載：9.0.x.x。影響ありとして記載：5.x。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：VMware / vSphere Foundation。影響ありとして記載：9.1.x.x。影響ありとして記載：9.0.x.x。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：VMware / vCenter。影響ありとして記載：9.1.x.x以上、9.1.0.0300未満。影響ありとして記載：9.0.x.x以上、9.0.2.0100未満。影響ありとして記載：8.0以上、8.0 U3k未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：VMware / Telco Cloud Infrastructure。影響ありとして記載：3.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：VMware / Telco Cloud Platform。影響ありとして記載：5.1.x。影響ありとして記載：5.0.x。影響ありとして記載：4.x。影響ありとして記載：3.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E7" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cloud Foundation / vSphere Foundation / vCenter / Telco Cloud Infrastructure / Telco Cloud Platform」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-59310", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-59310" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-59310", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-59310" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-59310", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-59310" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "label": "CVE：vmware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-59310", "label": "CVE公式レコード" }, { "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59310", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourceField": "/containers/cna/title", "excerpt": "vCenter directory-traversal vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"VMware\",\"product\":\"Cloud Foundation\",\"versions\":[{\"status\":\"affected\",\"version\":\"9.1.x.x\"},{\"status\":\"affected\",\"version\":\"9.0.x.x\"},{\"status\":\"affected\",\"version\":\"5.x\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"VMware\",\"product\":\"vSphere Foundation\",\"versions\":[{\"status\":\"affected\",\"version\":\"9.1.x.x\"},{\"status\":\"affected\",\"version\":\"9.0.x.x\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"VMware\",\"product\":\"vCenter\",\"versions\":[{\"status\":\"affected\",\"version\":\"9.1.x.x\",\"lessThan\":\"9.1.0.0300\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"9.0.x.x\",\"lessThan\":\"9.0.2.0100\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"8.0\",\"lessThan\":\"8.0 U3k\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"VMware\",\"product\":\"Telco Cloud Infrastructure\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.0\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59310.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"VMware\",\"product\":\"Telco Cloud Platform\",\"versions\":[{\"status\":\"affected\",\"version\":\"5.1.x\"},{\"status\":\"affected\",\"version\":\"5.0.x\"},{\"status\":\"affected\",\"version\":\"4.x\"},{\"status\":\"affected\",\"version\":\"3.0\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-59310\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-59310（Cloud Foundation / vSphere Foundation / vCenter / Telco Cloud Infrastructure / Telco Cloud Platform）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Cloud Foundation のバージョン 9.1.x.x、9.0.x.x、5.x が影響を受けます。\n・vSphere Foundation のバージョン 9.1.x.x、9.0.x.x が影響を受けます。\n・vCenter のバージョン 9.1.x.x（バージョン < 9.1.0.0300）、9.0.x.x（バージョン < 9.0.2.0100）、8.0（バージョン < 8.0 U3k）が影響を受けます。\n・Telco Cloud Infrastructure のバージョン 3.0 が影響を受けます。\n・Telco Cloud Platform のバージョン 5.1.x、5.0.x、4.x、3.0 が影響を受けます。\n・公式の対象表：VMware / Cloud Foundation。影響ありとして記載：9.1.x.x。影響ありとして記載：9.0.x.x。影響ありとして記載：5.x。\n・公式の対象表：VMware / vSphere Foundation。影響ありとして記載：9.1.x.x。影響ありとして記載：9.0.x.x。\n・公式の対象表：VMware / vCenter。影響ありとして記載：9.1.x.x以上、9.1.0.0300未満。影響ありとして記載：9.0.x.x以上、9.0.2.0100未満。影響ありとして記載：8.0以上、8.0 U3k未満。\n・公式の対象表：VMware / Telco Cloud Infrastructure。影響ありとして記載：3.0。\n・公式の対象表：VMware / Telco Cloud Platform。影響ありとして記載：5.1.x。影響ありとして記載：5.0.x。影響ありとして記載：4.x。影響ありとして記載：3.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-59310", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:54.707Z", "lastSuccess": "2026-10-23T03:22:54.707Z", "sourceCheckedAt": "2026-10-23T02:43:49.686Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-65400", "aliases": [], "title": "macOS：脆弱性情報", "summary": "認証の問題が改善された状態管理で対処されました。この問題は macOS Golden Gate 27、macOS Sequoia 15.7.9、macOS Sonoma 14.8.9、macOS Tahoe 26.6.1、macOS Tahoe 26.7 で修正されています。ネットワーク上の攻撃者が正当な資格情報なしで Screen Sharing に認証できる可能性があります。", "risk": "攻撃者が正当な資格情報なしで Screen Sharing に認証できるため、画面共有機能を不正に利用される恐れがあります。", "product": "macOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "macOS", "range": "< 14.8.9" }, { "product": "macOS", "range": "< 15.7.9" }, { "product": "macOS", "range": "< 26.6.1" }, { "product": "macOS", "range": "< 26.7" }, { "product": "macOS", "range": "< 27" } ], "fixed": [], "steps": [ "この問題は macOS Golden Gate 27、macOS Sequoia 15.7.9、macOS Sonoma 14.8.9、macOS Tahoe 26.6.1、macOS Tahoe 26.7 で修正されています。", "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-65400", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/148170", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/148171", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/148172", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/149035", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/149042", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-06T18:17:18.263Z", "modifiedAt": "2026-09-14T20:48:37.949Z", "fetchedAt": "2026-10-23T02:43:49.897Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "14.8.9", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "15.7.9", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "26.6.1", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "26.7", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "27", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-65400", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "fetchedAt": "2026-10-23T02:43:49.897Z", "publishedAt": "2026-08-06T18:17:18.263Z", "modifiedAt": "2026-09-14T20:48:37.949Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "14.8.9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "15.7.9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "26.6.1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0", "lessThan": "26.7", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "0", "lessThan": "27", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "An attacker on the network may be able to authenticate to Screen Sharing without valid credentials", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/148170", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/0" }, { "url": "https://support.apple.com/en-us/148171", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/1" }, { "url": "https://support.apple.com/en-us/148172", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/2" }, { "url": "https://support.apple.com/en-us/149035", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/3" }, { "url": "https://support.apple.com/en-us/149042", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/4" }, { "url": "https://advisories.ncsc.nl/2026/ncsc-2026-0280.html", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://seclists.org/fulldisclosure/2026/Aug/36", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "http://seclists.org/fulldisclosure/2026/Aug/37", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"14.8.9\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.7.9\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.6.1\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.7\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"27\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-14T20:48:37.949Z", "fetchedAt": "2026-10-23T02:43:49.897Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-18T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "macOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:54.943Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6c484bbfd40db4e78363ecacd43401bbfc10408e996b28732564613596847916", "sourceModifiedAt": "2026-09-14T20:48:37.949Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "認証の問題が改善された状態管理で対処されました。この問題は macOS Golden Gate 27、macOS Sequoia 15.7.9、macOS Sonoma 14.8.9、macOS Tahoe 26.6.1、macOS Tahoe 26.7 で修正されています。ネットワーク上の攻撃者が正当な資格情報なしで Screen Sharing に認証できる可能性があります。", "risk": "攻撃者が正当な資格情報なしで Screen Sharing に認証できるため、画面共有機能を不正に利用される恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "macOS バージョンが 14.8.9 未満のものは影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "macOS バージョンが 15.7.9 未満のものは影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "macOS バージョンが 26.6.1 未満のものは影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "macOS バージョンが 26.7 未満のものは影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "macOS バージョンが 27 未満のものは影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：14.8.9未満の版。影響ありとして記載：15.7.9未満の版。影響ありとして記載：26.6.1未満の版。影響ありとして記載：26.7未満の版。影響ありとして記載：27未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "「macOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-65400", "https://support.apple.com/en-us/148170", "https://support.apple.com/en-us/148171", "https://support.apple.com/en-us/148172", "https://support.apple.com/en-us/149035", "https://support.apple.com/en-us/149042", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "actions": [ { "text": "この問題は macOS Golden Gate 27、macOS Sequoia 15.7.9、macOS Sonoma 14.8.9、macOS Tahoe 26.6.1、macOS Tahoe 26.7 で修正されています。", "kind": "fix", "evidenceIds": [ "E1" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ] }, { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-65400", "https://support.apple.com/en-us/148170", "https://support.apple.com/en-us/148171", "https://support.apple.com/en-us/148172", "https://support.apple.com/en-us/149035", "https://support.apple.com/en-us/149042", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-65400", "https://support.apple.com/en-us/148170", "https://support.apple.com/en-us/148171", "https://support.apple.com/en-us/148172", "https://support.apple.com/en-us/149035", "https://support.apple.com/en-us/149042", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-65400", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/148170", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/148171", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/148172", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/149035", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/149042", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65400.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"14.8.9\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.7.9\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.6.1\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"26.7\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"27\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-65400\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-65400（macOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・macOS バージョンが 14.8.9 未満のものは影響を受けます。\n・macOS バージョンが 15.7.9 未満のものは影響を受けます。\n・macOS バージョンが 26.6.1 未満のものは影響を受けます。\n・macOS バージョンが 26.7 未満のものは影響を受けます。\n・macOS バージョンが 27 未満のものは影響を受けます。\n・公式の対象表：Apple / macOS。影響ありとして記載：14.8.9未満の版。影響ありとして記載：15.7.9未満の版。影響ありとして記載：26.6.1未満の版。影響ありとして記載：26.7未満の版。影響ありとして記載：27未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-65400", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:54.943Z", "lastSuccess": "2026-10-23T03:22:54.943Z", "sourceCheckedAt": "2026-10-23T02:43:49.897Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-62593", "aliases": [], "title": "ray：コード実行", "summary": "RayはAI計算エンジンで、バージョン2.52.0以前の開発者がFirefoxやSafariを使用している場合、DNSリバインディング攻撃と組み合わせて利用できる重大なリモートコード実行（RCE）脆弱性が存在します。この脆弱性は、User-Agentヘッダーが「Mozilla」で始まることだけを防御に用いている点が不十分で、ヘッダーはfetch仕様により変更可能です。開発者が悪意あるウェブサイトや広告を誤って閲覧すると、攻撃者がサーバー上で任意のコードを実行できるようになります。この問題はバージョン2.52.0で修正されました。", "risk": "攻撃者がRayを実行しているサーバー上で任意のコードを実行できる可能性があります。", "product": "ray", "category": "other", "component": "package", "severity": "critical", "cvss": 9.4, "cvssVersion": "4.0", "cvssSource": "GitHub_M", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "ray", "range": "< 2.52.0" } ], "fixed": [], "steps": [ "Rayをバージョン2.52.0以降にアップデートしてください。これにより脆弱性が修正されます。", "「CVE-2025-62593」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-62593", "label": "CVE公式レコード" }, { "url": "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "label": "CISAが示す関連情報" }, { "url": "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62593", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-11-26T22:28:28.577Z", "modifiedAt": "2026-10-01T18:07:54.129Z", "fetchedAt": "2026-10-23T02:43:39.950Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string \"Mozilla\" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.", "sourceTitle": "Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "ray-project", "product": "ray", "versions": [ { "version": "< 2.52.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-62593", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "fetchedAt": "2026-10-23T02:43:39.950Z", "publishedAt": "2025-11-26T22:28:28.577Z", "modifiedAt": "2026-10-01T18:07:54.129Z", "state": "published", "provider": "GitHub_M", "title": "Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack", "descriptions": [ { "lang": "en", "value": "Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string \"Mozilla\" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "ray-project", "product": "ray", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< 2.52.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-352", "lang": "en", "description": "CWE-352: Cross-Site Request Forgery (CSRF)", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.4, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "label": "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "label": "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62593", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"ray-project\",\"product\":\"ray\",\"versions\":[{\"version\":\"< 2.52.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string \"Mozilla\" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"lang\":\"en\",\"description\":\"CWE-94: Improper Control of Generation of Code ('Code Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-352\",\"lang\":\"en\",\"description\":\"CWE-352: Cross-Site Request Forgery (CSRF)\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"PASSIVE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"baseScore\":9.4,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-01T18:07:54.129Z", "fetchedAt": "2026-10-23T02:43:39.950Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-17T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "rayにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:55.658Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "f476487b748fd9d5571c7cb32fe2d1c672f68aec8e5c82bd7d399432405a9e03", "sourceModifiedAt": "2026-10-01T18:07:54.129Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "RayはAI計算エンジンで、バージョン2.52.0以前の開発者がFirefoxやSafariを使用している場合、DNSリバインディング攻撃と組み合わせて利用できる重大なリモートコード実行（RCE）脆弱性が存在します。この脆弱性は、User-Agentヘッダーが「Mozilla」で始まることだけを防御に用いている点が不十分で、ヘッダーはfetch仕様により変更可能です。開発者が悪意あるウェブサイトや広告を誤って閲覧すると、攻撃者がサーバー上で任意のコードを実行できるようになります。この問題はバージョン2.52.0で修正されました。", "risk": "攻撃者がRayを実行しているサーバー上で任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Rayのバージョンが2.52.0未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "開発者がRayを開発ツールとして使用していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Firefoxブラウザを使用していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Safariブラウザを使用していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者がDNSリバインディング攻撃を実行できる環境であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "開発者が悪意あるウェブサイトや広告（malvertising）を誤って閲覧する可能性があること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Rayの防御がUser-Agentヘッダーが「Mozilla」で始まることだけに依存していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：ray-project / ray。影響ありとして記載：< 2.52.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ray」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-62593", "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2025-62593" ] } ], "actions": [ { "text": "Rayをバージョン2.52.0以降にアップデートしてください。これにより脆弱性が修正されます。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2025-62593」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-62593", "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2025-62593" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-62593", "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2025-62593" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-62593", "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2025-62593" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-62593", "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2025-62593" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-62593", "label": "CVE公式レコード" }, { "url": "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "label": "CISAが示す関連情報" }, { "url": "https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62593", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string \"Mozilla\" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourceField": "/containers/cna/title", "excerpt": "Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/62xxx/CVE-2025-62593.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"ray-project\",\"product\":\"ray\",\"versions\":[{\"version\":\"< 2.52.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-62593\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-62593（ray）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Rayのバージョンが2.52.0未満であること。\n・開発者がRayを開発ツールとして使用していること。\n・Firefoxブラウザを使用していること。\n・Safariブラウザを使用していること。\n・攻撃者がDNSリバインディング攻撃を実行できる環境であること。\n・開発者が悪意あるウェブサイトや広告（malvertising）を誤って閲覧する可能性があること。\n・Rayの防御がUser-Agentヘッダーが「Mozilla」で始まることだけに依存していること。\n・公式の対象表：ray-project / ray。影響ありとして記載：< 2.52.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-62593", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:55.658Z", "lastSuccess": "2026-10-23T03:22:55.658Z", "sourceCheckedAt": "2026-10-23T02:43:39.950Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-16094", "aliases": [], "title": "Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms：データベースへの不正操作", "summary": "Invisible Anti-Spam & CAPTCHA（バージョン5.1まで）において、編集者以上の権限を持つ認証済みユーザーが 'key' パラメータを介して SQL インジェクションを実行できる脆弱性があります。", "risk": "攻撃者はデータベースから機密情報を取得できる可能性があります。", "product": "Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.9, "cvssVersion": "3.1", "cvssSource": "Wordfence", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms", "range": "<= 5.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16094", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d97ca8e-e735-4312-bfb2-5c434cb5b190?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L767", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L769", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L290", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L292", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L428", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L451", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L503", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3633500/gdpr-compliant-recaptcha-for-all-forms", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16094", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-15T03:25:58.224Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:46.645Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to, and including, 5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", "sourceTitle": "Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via 'key' Parameter", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "matthiasnordwig", "product": "Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms", "versions": [ { "version": "0", "status": "affected", "lessThanOrEqual": "5.1", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-16094", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "fetchedAt": "2026-10-23T02:43:46.645Z", "publishedAt": "2026-08-15T03:25:58.224Z", "modifiedAt": "2026-08-17T19:38:56.976Z", "state": "published", "provider": "Wordfence", "title": "Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via 'key' Parameter", "descriptions": [ { "lang": "en", "value": "The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to, and including, 5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "matthiasnordwig", "product": "Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "5.1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-89", "lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.9, "baseSeverity": "MEDIUM", "provider": "Wordfence", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d97ca8e-e735-4312-bfb2-5c434cb5b190?source=cve", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/0" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L767", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/1" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L769", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/2" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L290", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/3" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L292", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/4" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L428", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/5" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L451", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/6" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L503", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/7" }, { "url": "https://plugins.trac.wordpress.org/changeset/3633500/gdpr-compliant-recaptcha-for-all-forms", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/8" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"matthiasnordwig\",\"product\":\"Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"5.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to, and including, 5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\",\"cweId\":\"CWE-89\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.9,\"baseSeverity\":\"MEDIUM\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-17T19:38:56.976Z", "fetchedAt": "2026-10-23T02:43:46.645Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Formsにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:56.032Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7c5e8af649dcc3f26de5fd780a74c4e84f86d823bf613753b626b6ff73d29c7e", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Invisible Anti-Spam & CAPTCHA（バージョン5.1まで）において、編集者以上の権限を持つ認証済みユーザーが 'key' パラメータを介して SQL インジェクションを実行できる脆弱性があります。", "risk": "攻撃者はデータベースから機密情報を取得できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "WordPress 用プラグイン「Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms」のすべてのバージョン（5.1 を含む）で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "攻撃を行えるのは、編集者レベル以上の権限を持つ認証済みユーザーに限られます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：matthiasnordwig / Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms。影響ありとして記載：5.1以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-16094", "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d97ca8e-e735-4312-bfb2-5c434cb5b190?source=cve", "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L767", "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L769", "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L290", "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L292", "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L428", "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L451", "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L503", "https://plugins.trac.wordpress.org/changeset/3633500/gdpr-compliant-recaptcha-for-all-forms", "https://nvd.nist.gov/vuln/detail/CVE-2026-16094" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-16094", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d97ca8e-e735-4312-bfb2-5c434cb5b190?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L767", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L769", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L290", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-option.php#L292", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L428", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L451", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/gdpr-compliant-recaptcha-for-all-forms/tags/5.0/includes/class-message-page.php#L503", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3633500/gdpr-compliant-recaptcha-for-all-forms", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16094", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "sourceField": "/containers/cna/title", "excerpt": "Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via 'key' Parameter", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to, and including, 5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16094.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"matthiasnordwig\",\"product\":\"Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"5.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-16094（Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WordPress 用プラグイン「Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms」のすべてのバージョン（5.1 を含む）で影響を受けます。\n・攻撃を行えるのは、編集者レベル以上の権限を持つ認証済みユーザーに限られます。\n・公式の対象表：matthiasnordwig / Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms。影響ありとして記載：5.1以下の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-16094", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:56.032Z", "lastSuccess": "2026-10-23T03:22:56.032Z", "sourceCheckedAt": "2026-10-23T02:43:46.645Z", "errorCode": null }, "glossary": [ { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-20349", "aliases": [], "title": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software：サービス停止", "summary": "Cisco Secure Firewall Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Secure Firewall Threat Defense (FTD) ソフトウェアのリモートアクセス SSL VPN サービスに脆弱性があり、認証されていないリモート攻撃者が細工した HTTP リクエストを送ると、デバイスが予期せずリロードされ、サービスが停止する（DoS）可能性がある。", "risk": "デバイスが予期せずリロードされるため、サービスが利用できなくなる（DoS）状態になる。", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "affected": [ { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.1.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.23" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.46" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.27" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.53" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.56" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.42" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.48" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.27" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.57" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.21" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.61" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.31" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.62" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.34" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.67" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.70" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.40" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.71" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.47" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.37" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.76" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.50" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.52" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.6" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.53" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.82" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.16" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.42" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.57" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.84" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.66" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.85" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.67" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.24.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.68" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.71" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.89" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.32" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.76" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.24.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.24.1.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.3.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.92" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.135" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.195" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.30" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.24.1.155" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.32" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.24.1.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.34" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.82" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.4.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.8.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.9" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.7.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.10" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.7.10" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.7.11" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.8.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.7.10.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.10.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "10.0.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.9" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.11" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "10.0.2" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20349", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20349", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-11T17:06:03.091Z", "modifiedAt": "2026-09-16T20:15:35.860Z", "fetchedAt": "2026-10-23T02:43:47.504Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. \r\n\r\nThis vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.", "sourceTitle": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "versions": [ { "version": "9.16.1", "status": "affected" }, { "version": "9.16.1.28", "status": "affected" }, { "version": "9.16.2", "status": "affected" }, { "version": "9.16.2.3", "status": "affected" }, { "version": "9.16.2.7", "status": "affected" }, { "version": "9.16.2.11", "status": "affected" }, { "version": "9.16.2.13", "status": "affected" }, { "version": "9.16.2.14", "status": "affected" }, { "version": "9.16.3.3", "status": "affected" }, { "version": "9.16.3", "status": "affected" }, { "version": "9.16.3.14", "status": "affected" }, { "version": "9.18.1", "status": "affected" }, { "version": "9.16.3.15", "status": "affected" }, { "version": "9.18.1.3", "status": "affected" }, { "version": "9.18.2", "status": "affected" }, { "version": "9.16.3.19", "status": "affected" }, { "version": "9.16.3.23", "status": "affected" }, { "version": "9.18.2.5", "status": "affected" }, { "version": "9.16.4", "status": "affected" }, { "version": "9.18.2.7", "status": "affected" }, { "version": "9.19.1", "status": "affected" }, { "version": "9.16.4.9", "status": "affected" }, { "version": "9.18.2.8", "status": "affected" }, { "version": "9.16.4.14", "status": "affected" }, { "version": "9.18.3", "status": "affected" }, { "version": "9.19.1.5", "status": "affected" }, { "version": "9.16.4.18", "status": "affected" }, { "version": "9.19.1.9", "status": "affected" }, { "version": "9.18.3.39", "status": "affected" }, { "version": "9.16.4.19", "status": "affected" }, { "version": "9.19.1.12", "status": "affected" }, { "version": "9.18.3.46", "status": "affected" }, { "version": "9.16.4.27", "status": "affected" }, { "version": "9.19.1.18", "status": "affected" }, { "version": "9.18.3.53", "status": "affected" }, { "version": "9.18.3.55", "status": "affected" }, { "version": "9.16.4.38", "status": "affected" }, { "version": "9.16.4.39", "status": "affected" }, { "version": "9.18.3.56", "status": "affected" }, { "version": "9.20.1", "status": "affected" }, { "version": "9.16.4.42", "status": "affected" }, { "version": "9.19.1.22", "status": "affected" }, { "version": "9.18.4", "status": "affected" }, { "version": "9.20.1.5", "status": "affected" }, { "version": "9.18.4.5", "status": "affected" }, { "version": "9.19.1.24", "status": "affected" }, { "version": "9.16.4.48", "status": "affected" }, { "version": "9.18.4.8", "status": "affected" }, { "version": "9.20.2", "status": "affected" }, { "version": "9.19.1.27", "status": "affected" }, { "version": "9.16.4.55", "status": "affected" }, { "version": "9.18.4.22", "status": "affected" }, { "version": "9.20.2.10", "status": "affected" }, { "version": "9.16.4.57", "status": "affected" }, { "version": "9.19.1.28", "status": "affected" }, { "version": "9.18.4.24", "status": "affected" }, { "version": "9.20.2.21", "status": "affected" }, { "version": "9.16.4.61", "status": "affected" }, { "version": "9.19.1.31", "status": "affected" }, { "version": "9.18.4.29", "status": "affected" }, { "version": "9.20.2.22", "status": "affected" }, { "version": "9.16.4.62", "status": "affected" }, { "version": "9.18.4.34", "status": "affected" }, { "version": "9.20.3", "status": "affected" }, { "version": "9.16.4.67", "status": "affected" }, { "version": "9.16.4.70", "status": "affected" }, { "version": "9.18.4.40", "status": "affected" }, { "version": "9.23.1", "status": "affected" }, { "version": "9.22.1.1", "status": "affected" }, { "version": "9.16.4.71", "status": "affected" }, { "version": "9.20.3.4", "status": "affected" }, { "version": "9.18.4.47", "status": "affected" }, { "version": "9.20.3.7", "status": "affected" }, { "version": "9.19.1.37", "status": "affected" }, { "version": "9.16.4.76", "status": "affected" }, { "version": "9.20.3.9", "status": "affected" }, { "version": "9.19.1.38", "status": "affected" }, { "version": "9.18.4.50", "status": "affected" }, { "version": "9.22.1.3", "status": "affected" }, { "version": "9.20.3.10", "status": "affected" }, { "version": "9.22.1.2", "status": "affected" }, { "version": "9.18.4.52", "status": "affected" }, { "version": "9.20.3.13", "status": "affected" }, { "version": "9.22.1.6", "status": "affected" }, { "version": "9.18.4.53", "status": "affected" }, { "version": "9.16.4.82", "status": "affected" }, { "version": "9.22.2", "status": "affected" }, { "version": "9.20.3.16", "status": "affected" }, { "version": "9.19.1.42", "status": "affected" }, { "version": "9.18.4.57", "status": "affected" }, { "version": "9.16.4.84", "status": "affected" }, { "version": "9.23.1.3", "status": "affected" }, { "version": "9.20.3.20", "status": "affected" }, { "version": "9.22.2.4", "status": "affected" }, { "version": "9.23.1.7", "status": "affected" }, { "version": "9.20.4", "status": "affected" }, { "version": "9.22.2.9", "status": "affected" }, { "version": "9.23.1.13", "status": "affected" }, { "version": "9.20.4.7", "status": "affected" }, { "version": "9.22.2.13", "status": "affected" }, { "version": "9.18.4.66", "status": "affected" }, { "version": "9.20.4.10", "status": "affected" }, { "version": "9.23.1.19", "status": "affected" }, { "version": "9.16.4.85", "status": "affected" }, { "version": "9.22.2.14", "status": "affected" }, { "version": "9.18.4.67", "status": "affected" }, { "version": "9.24.1", "status": "affected" }, { "version": "9.18.4.68", "status": "affected" }, { "version": "9.23.1.22", "status": "affected" }, { "version": "9.20.4.14", "status": "affected" }, { "version": "9.22.2.20", "status": "affected" }, { "version": "9.18.4.71", "status": "affected" }, { "version": "9.20.4.19", "status": "affected" }, { "version": "9.23.1.26", "status": "affected" }, { "version": "9.16.4.89", "status": "affected" }, { "version": "9.22.2.32", "status": "affected" }, { "version": "9.18.4.76", "status": "affected" }, { "version": "9.22.3", "status": "affected" }, { "version": "9.24.1.5", "status": "affected" }, { "version": "9.20.4.22", "status": "affected" }, { "version": "9.24.1.9", "status": "affected" }, { "version": "9.20.4.28", "status": "affected" }, { "version": "9.22.3.5", "status": "affected" }, { "version": "9.16.4.92", "status": "affected" }, { "version": "9.18.4.135", "status": "affected" }, { "version": "9.23.1.195", "status": "affected" }, { "version": "9.20.4.30", "status": "affected" }, { "version": "9.24.1.155", "status": "affected" }, { "version": "9.23.1.32", "status": "affected" }, { "version": "9.24.1.11", "status": "affected" }, { "version": "9.20.4.34", "status": "affected" }, { "version": "9.18.4.82", "status": "affected" } ], "defaultStatus": "unknown" }, { "vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [ { "version": "7.0.0", "status": "affected" }, { "version": "7.0.0.1", "status": "affected" }, { "version": "7.0.1", "status": "affected" }, { "version": "7.0.1.1", "status": "affected" }, { "version": "7.0.2", "status": "affected" }, { "version": "7.2.0", "status": "affected" }, { "version": "7.0.2.1", "status": "affected" }, { "version": "7.0.3", "status": "affected" }, { "version": "7.2.0.1", "status": "affected" }, { "version": "7.0.4", "status": "affected" }, { "version": "7.2.1", "status": "affected" }, { "version": "7.0.5", "status": "affected" }, { "version": "7.3.0", "status": "affected" }, { "version": "7.2.2", "status": "affected" }, { "version": "7.2.3", "status": "affected" }, { "version": "7.3.1", "status": "affected" }, { "version": "7.2.4", "status": "affected" }, { "version": "7.0.6", "status": "affected" }, { "version": "7.2.5", "status": "affected" }, { "version": "7.2.4.1", "status": "affected" }, { "version": "7.3.1.1", "status": "affected" }, { "version": "7.4.0", "status": "affected" }, { "version": "7.0.6.1", "status": "affected" }, { "version": "7.2.5.1", "status": "affected" }, { "version": "7.4.1", "status": "affected" }, { "version": "7.2.6", "status": "affected" }, { "version": "7.0.6.2", "status": "affected" }, { "version": "7.4.1.1", "status": "affected" }, { "version": "7.2.7", "status": "affected" }, { "version": "7.2.5.2", "status": "affected" }, { "version": "7.3.1.2", "status": "affected" }, { "version": "7.2.8", "status": "affected" }, { "version": "7.6.0", "status": "affected" }, { "version": "7.4.2", "status": "affected" }, { "version": "7.2.8.1", "status": "affected" }, { "version": "7.0.6.3", "status": "affected" }, { "version": "7.4.2.1", "status": "affected" }, { "version": "7.2.9", "status": "affected" }, { "version": "7.0.7", "status": "affected" }, { "version": "7.7.0", "status": "affected" }, { "version": "7.4.2.2", "status": "affected" }, { "version": "7.2.10", "status": "affected" }, { "version": "7.6.1", "status": "affected" }, { "version": "7.4.2.3", "status": "affected" }, { "version": "7.0.8", "status": "affected" }, { "version": "7.6.2", "status": "affected" }, { "version": "7.7.10", "status": "affected" }, { "version": "7.7.11", "status": "affected" }, { "version": "7.0.8.1", "status": "affected" }, { "version": "7.6.2.1", "status": "affected" }, { "version": "7.7.10.1", "status": "affected" }, { "version": "7.4.2.4", "status": "affected" }, { "version": "7.2.10.2", "status": "affected" }, { "version": "7.4.3", "status": "affected" }, { "version": "7.6.4", "status": "affected" }, { "version": "10.0.0", "status": "affected" }, { "version": "7.4.4", "status": "affected" }, { "version": "7.0.9", "status": "affected" }, { "version": "7.2.11", "status": "affected" }, { "version": "7.4.7", "status": "affected" }, { "version": "10.0.2", "status": "affected" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-20349", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "fetchedAt": "2026-10-23T02:43:47.504Z", "publishedAt": "2026-08-11T17:06:03.091Z", "modifiedAt": "2026-09-16T20:15:35.860Z", "state": "published", "provider": "cisco", "title": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability", "descriptions": [ { "lang": "en", "value": "A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. \r\n\r\nThis vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.16.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.16.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "9.16.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "9.16.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "9.16.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "9.16.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.16.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "9.16.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "9.16.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "9.16.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "9.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "9.16.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "9.18.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "9.18.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "9.16.3.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "9.16.3.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "9.18.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.16.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "9.18.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "9.19.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "9.16.4.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "9.18.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "9.16.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "9.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "9.19.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "9.16.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "9.19.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "9.18.3.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "9.16.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "9.19.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "9.18.3.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "9.16.4.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "9.19.1.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "9.18.3.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "9.18.3.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "9.16.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.16.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.18.3.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.20.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "9.16.4.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "9.19.1.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "9.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "9.20.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "9.19.1.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "9.16.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "9.18.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "9.20.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "9.19.1.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "9.16.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "9.18.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "9.20.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "9.16.4.57", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "9.19.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "9.18.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "9.20.2.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "9.16.4.61", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "9.19.1.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "9.18.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "9.20.2.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "9.16.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "9.18.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "9.20.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "9.16.4.67", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "9.16.4.70", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "9.18.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "9.23.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "9.22.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "9.16.4.71", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "9.20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "9.18.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "9.20.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "9.19.1.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.16.4.76", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "9.20.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "9.19.1.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "9.18.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "9.22.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "9.20.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "9.22.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "9.18.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "9.20.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "9.22.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "9.18.4.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "9.16.4.82", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "9.22.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "9.20.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "9.19.1.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "9.18.4.57", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "9.16.4.84", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "9.23.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "9.20.3.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "9.22.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "9.23.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "9.20.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "9.22.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "9.23.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "9.20.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "9.22.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "9.18.4.66", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "9.20.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "9.23.1.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "9.16.4.85", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "9.22.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "9.18.4.67", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "9.24.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "9.18.4.68", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "9.23.1.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "9.20.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "9.22.2.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "9.18.4.71", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "9.20.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "9.23.1.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "9.16.4.89", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "9.22.2.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "9.18.4.76", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "9.22.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "9.24.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "9.20.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "9.24.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "9.20.4.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "9.22.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "9.16.4.92", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "9.18.4.135", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.23.1.195", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "9.20.4.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "9.24.1.155", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "9.23.1.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "9.24.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "9.20.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "9.18.4.82", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "7.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "7.0.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "7.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "7.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "7.0.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "7.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "7.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "7.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "7.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "7.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "7.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "7.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "7.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "7.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "7.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "7.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "7.2.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "7.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "7.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "7.0.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "7.2.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "7.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "7.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "7.0.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "7.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "7.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "7.2.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "7.3.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "7.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "7.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "7.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "7.2.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "7.0.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "7.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "7.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "7.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "7.7.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "7.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "7.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "7.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "7.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "7.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "7.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "7.7.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "7.7.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "7.0.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "7.6.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "7.7.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "7.4.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "7.2.10.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "7.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "7.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "10.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "7.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "7.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "7.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "7.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "10.0.2", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "In August 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-244", "lang": "en", "description": "Improper Clearing of Heap Memory Before Release ('Heap Inspection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "label": "cisco-sa-asaftd-vpn-dos-dzv4mQFF", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20349", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.18.4.29\",\"status\":\"affected\"},{\"version\":\"9.20.2.22\",\"status\":\"affected\"},{\"version\":\"9.16.4.62\",\"status\":\"affected\"},{\"version\":\"9.18.4.34\",\"status\":\"affected\"},{\"version\":\"9.20.3\",\"status\":\"affected\"},{\"version\":\"9.16.4.67\",\"status\":\"affected\"},{\"version\":\"9.16.4.70\",\"status\":\"affected\"},{\"version\":\"9.18.4.40\",\"status\":\"affected\"},{\"version\":\"9.23.1\",\"status\":\"affected\"},{\"version\":\"9.22.1.1\",\"status\":\"affected\"},{\"version\":\"9.16.4.71\",\"status\":\"affected\"},{\"version\":\"9.20.3.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.47\",\"status\":\"affected\"},{\"version\":\"9.20.3.7\",\"status\":\"affected\"},{\"version\":\"9.19.1.37\",\"status\":\"affected\"},{\"version\":\"9.16.4.76\",\"status\":\"affected\"},{\"version\":\"9.20.3.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.38\",\"status\":\"affected\"},{\"version\":\"9.18.4.50\",\"status\":\"affected\"},{\"version\":\"9.22.1.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.10\",\"status\":\"affected\"},{\"version\":\"9.22.1.2\",\"status\":\"affected\"},{\"version\":\"9.18.4.52\",\"status\":\"affected\"},{\"version\":\"9.20.3.13\",\"status\":\"affected\"},{\"version\":\"9.22.1.6\",\"status\":\"affected\"},{\"version\":\"9.18.4.53\",\"status\":\"affected\"},{\"version\":\"9.16.4.82\",\"status\":\"affected\"},{\"version\":\"9.22.2\",\"status\":\"affected\"},{\"version\":\"9.20.3.16\",\"status\":\"affected\"},{\"version\":\"9.19.1.42\",\"status\":\"affected\"},{\"version\":\"9.18.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.84\",\"status\":\"affected\"},{\"version\":\"9.23.1.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.20\",\"status\":\"affected\"},{\"version\":\"9.22.2.4\",\"status\":\"affected\"},{\"version\":\"9.23.1.7\",\"status\":\"affected\"},{\"version\":\"9.20.4\",\"status\":\"affected\"},{\"version\":\"9.22.2.9\",\"status\":\"affected\"},{\"version\":\"9.23.1.13\",\"status\":\"affected\"},{\"version\":\"9.20.4.7\",\"status\":\"affected\"},{\"version\":\"9.22.2.13\",\"status\":\"affected\"},{\"version\":\"9.18.4.66\",\"status\":\"affected\"},{\"version\":\"9.20.4.10\",\"status\":\"affected\"},{\"version\":\"9.23.1.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.85\",\"status\":\"affected\"},{\"version\":\"9.22.2.14\",\"status\":\"affected\"},{\"version\":\"9.18.4.67\",\"status\":\"affected\"},{\"version\":\"9.24.1\",\"status\":\"affected\"},{\"version\":\"9.18.4.68\",\"status\":\"affected\"},{\"version\":\"9.23.1.22\",\"status\":\"affected\"},{\"version\":\"9.20.4.14\",\"status\":\"affected\"},{\"version\":\"9.22.2.20\",\"status\":\"affected\"},{\"version\":\"9.18.4.71\",\"status\":\"affected\"},{\"version\":\"9.20.4.19\",\"status\":\"affected\"},{\"version\":\"9.23.1.26\",\"status\":\"affected\"},{\"version\":\"9.16.4.89\",\"status\":\"affected\"},{\"version\":\"9.22.2.32\",\"status\":\"affected\"},{\"version\":\"9.18.4.76\",\"status\":\"affected\"},{\"version\":\"9.22.3\",\"status\":\"affected\"},{\"version\":\"9.24.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.4.22\",\"status\":\"affected\"},{\"version\":\"9.24.1.9\",\"status\":\"affected\"},{\"version\":\"9.20.4.28\",\"status\":\"affected\"},{\"version\":\"9.22.3.5\",\"status\":\"affected\"},{\"version\":\"9.16.4.92\",\"status\":\"affected\"},{\"version\":\"9.18.4.135\",\"status\":\"affected\"},{\"version\":\"9.23.1.195\",\"status\":\"affected\"},{\"version\":\"9.20.4.30\",\"status\":\"affected\"},{\"version\":\"9.24.1.155\",\"status\":\"affected\"},{\"version\":\"9.23.1.32\",\"status\":\"affected\"},{\"version\":\"9.24.1.11\",\"status\":\"affected\"},{\"version\":\"9.20.4.34\",\"status\":\"affected\"},{\"version\":\"9.18.4.82\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Threat Defense (FTD) Software\",\"versions\":[{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.6.0\",\"status\":\"affected\"},{\"version\":\"7.4.2\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.3\",\"status\":\"affected\"},{\"version\":\"7.4.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.9\",\"status\":\"affected\"},{\"version\":\"7.0.7\",\"status\":\"affected\"},{\"version\":\"7.7.0\",\"status\":\"affected\"},{\"version\":\"7.4.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.10\",\"status\":\"affected\"},{\"version\":\"7.6.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.3\",\"status\":\"affected\"},{\"version\":\"7.0.8\",\"status\":\"affected\"},{\"version\":\"7.6.2\",\"status\":\"affected\"},{\"version\":\"7.7.10\",\"status\":\"affected\"},{\"version\":\"7.7.11\",\"status\":\"affected\"},{\"version\":\"7.0.8.1\",\"status\":\"affected\"},{\"version\":\"7.6.2.1\",\"status\":\"affected\"},{\"version\":\"7.7.10.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.10.2\",\"status\":\"affected\"},{\"version\":\"7.4.3\",\"status\":\"affected\"},{\"version\":\"7.6.4\",\"status\":\"affected\"},{\"version\":\"10.0.0\",\"status\":\"affected\"},{\"version\":\"7.4.4\",\"status\":\"affected\"},{\"version\":\"7.0.9\",\"status\":\"affected\"},{\"version\":\"7.2.11\",\"status\":\"affected\"},{\"version\":\"7.4.7\",\"status\":\"affected\"},{\"version\":\"10.0.2\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. \r\n\r\nThis vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "In August 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Improper Clearing of Heap Memory Before Release ('Heap Inspection')\",\"type\":\"cwe\",\"cweId\":\"CWE-244\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-16T20:15:35.860Z", "fetchedAt": "2026-10-23T02:43:47.504Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-11T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Softwareにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:37:51.954Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "51a53eceb4ac4eeac91fdabe48a686acdb43aa1e26e30b696f28e983a1d34335", "sourceModifiedAt": "2026-09-16T20:15:35.860Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Secure Firewall Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Secure Firewall Threat Defense (FTD) ソフトウェアのリモートアクセス SSL VPN サービスに脆弱性があり、認証されていないリモート攻撃者が細工した HTTP リクエストを送ると、デバイスが予期せずリロードされ、サービスが停止する（DoS）可能性がある。", "risk": "デバイスが予期せずリロードされるため、サービスが利用できなくなる（DoS）状態になる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていないリモート攻撃者が、影響を受けるデバイスのリモートアクセス SSL VPN サービスに細工した HTTP リクエストを送信できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software の S4 に列挙されたすべてのバージョンが影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Cisco Secure Firewall Threat Defense (FTD) Software の S5 に列挙されたすべてのバージョンが影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.18.1。影響ありとして記載：9.16.3.15。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.18.2.5。影響ありとして記載：9.16.4。影響ありとして記載：9.18.2.7。影響ありとして記載：9.19.1。影響ありとして記載：9.16.4.9。影響ありとして記載：9.18.2.8。影響ありとして記載：9.16.4.14。影響ありとして記載：9.18.3。影響ありとして記載：9.19.1.5。影響ありとして記載：9.16.4.18。影響ありとして記載：9.19.1.9。影響ありとして記載：9.18.3.39。影響ありとして記載：9.16.4.19。影響ありとして記載：9.19.1.12。影響ありとして記載：9.18.3.46。影響ありとして記載：9.16.4.27。影響ありとして記載：9.19.1.18。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.18.3.56。影響ありとして記載：9.20.1。影響ありとして記載：9.16.4.42。影響ありとして記載：9.19.1.22。影響ありとして記載：9.18.4。影響ありとして記載：9.20.1.5。影響ありとして記載：9.18.4.5。影響ありとして記載：9.19.1.24。影響ありとして記載：9.16.4.48。影響ありとして記載：9.18.4.8。影響ありとして記載：9.20.2。影響ありとして記載：9.19.1.27。影響ありとして記載：9.16.4.55。影響ありとして記載：9.18.4.22。影響ありとして記載：9.20.2.10。影響ありとして記載：9.16.4.57。影響ありとして記載：9.19.1.28。影響ありとして記載：9.18.4.24。影響ありとして記載：9.20.2.21。影響ありとして記載：9.16.4.61。影響ありとして記載：9.19.1.31。影響ありとして記載：9.18.4.29。影響ありとして記載：9.20.2.22。影響ありとして記載：9.16.4.62。影響ありとして記載：9.18.4.34。影響ありとして記載：9.20.3。影響ありとして記載：9.16.4.67。影響ありとして記載：9.16.4.70。影響ありとして記載：9.18.4.40。影響ありとして記載：9.23.1。影響ありとして記載：9.22.1.1。影響ありとして記載：9.16.4.71。影響ありとして記載：9.20.3.4。影響ありとして記載：9.18.4.47。影響ありとして記載：9.20.3.7。影響ありとして記載：9.19.1.37。影響ありとして記載：9.16.4.76。影響ありとして記載：9.20.3.9。影響ありとして記載：9.19.1.38。影響ありとして記載：9.18.4.50。影響ありとして記載：9.22.1.3。影響ありとして記載：9.20.3.10。影響ありとして記載：9.22.1.2。影響ありとして記載：9.18.4.52。影響ありとして記載：9.20.3.13。影響ありとして記載：9.22.1.6。影響ありとして記載：9.18.4.53。影響ありとして記載：9.16.4.82。影響ありとして記載：9.22.2。影響ありとして記載：9.20.3.16。影響ありとして記載：9.19.1.42。影響ありとして記載：9.18.4.57。影響ありとして記載：9.16.4.84。影響ありとして記載：9.23.1.3。影響ありとして記載：9.20.3.20。影響ありとして記載：9.22.2.4。影響ありとして記載：9.23.1.7。影響ありとして記載：9.20.4。影響ありとして記載：9.22.2.9。影響ありとして記載：9.23.1.13。影響ありとして記載：9.20.4.7。影響ありとして記載：9.22.2.13。影響ありとして記載：9.18.4.66。影響ありとして記載：9.20.4.10。影響ありとして記載：9.23.1.19。影響ありとして記載：9.16.4.85。影響ありとして記載：9.22.2.14。影響ありとして記載：9.18.4.67。影響ありとして記載：9.24.1。影響ありとして記載：9.18.4.68。影響ありとして記載：9.23.1.22。影響ありとして記載：9.20.4.14。影響ありとして記載：9.22.2.20。影響ありとして記載：9.18.4.71。影響ありとして記載：9.20.4.19。影響ありとして記載：9.23.1.26。影響ありとして記載：9.16.4.89。影響ありとして記載：9.22.2.32。影響ありとして記載：9.18.4.76。影響ありとして記載：9.22.3。影響ありとして記載：9.24.1.5。影響ありとして記載：9.20.4.22。影響ありとして記載：9.24.1.9。影響ありとして記載：9.20.4.28。影響ありとして記載：9.22.3.5。影響ありとして記載：9.16.4.92。影響ありとして記載：9.18.4.135。影響ありとして記載：9.23.1.195。影響ありとして記載：9.20.4.30。影響ありとして記載：9.24.1.155。影響ありとして記載：9.23.1.32。影響ありとして記載：9.24.1.11。影響ありとして記載：9.20.4.34。影響ありとして記載：9.18.4.82。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Cisco / Cisco Secure Firewall Threat Defense (FTD) Software。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.2.0。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.2.0.1。影響ありとして記載：7.0.4。影響ありとして記載：7.2.1。影響ありとして記載：7.0.5。影響ありとして記載：7.3.0。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.3.1。影響ありとして記載：7.2.4。影響ありとして記載：7.0.6。影響ありとして記載：7.2.5。影響ありとして記載：7.2.4.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。影響ありとして記載：7.0.6.1。影響ありとして記載：7.2.5.1。影響ありとして記載：7.4.1。影響ありとして記載：7.2.6。影響ありとして記載：7.0.6.2。影響ありとして記載：7.4.1.1。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.3.1.2。影響ありとして記載：7.2.8。影響ありとして記載：7.6.0。影響ありとして記載：7.4.2。影響ありとして記載：7.2.8.1。影響ありとして記載：7.0.6.3。影響ありとして記載：7.4.2.1。影響ありとして記載：7.2.9。影響ありとして記載：7.0.7。影響ありとして記載：7.7.0。影響ありとして記載：7.4.2.2。影響ありとして記載：7.2.10。影響ありとして記載：7.6.1。影響ありとして記載：7.4.2.3。影響ありとして記載：7.0.8。影響ありとして記載：7.6.2。影響ありとして記載：7.7.10。影響ありとして記載：7.7.11。影響ありとして記載：7.0.8.1。影響ありとして記載：7.6.2.1。影響ありとして記載：7.7.10.1。影響ありとして記載：7.4.2.4。影響ありとして記載：7.2.10.2。影響ありとして記載：7.4.3。影響ありとして記載：7.6.4。影響ありとして記載：10.0.0。影響ありとして記載：7.4.4。影響ありとして記載：7.0.9。影響ありとして記載：7.2.11。影響ありとして記載：7.4.7。影響ありとして記載：10.0.2。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20349", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-20349" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-20349", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-20349" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20349", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-20349" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20349", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20349", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. \r\n\r\nThis vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourceField": "/containers/cna/title", "excerpt": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.18.4.29\",\"status\":\"affected\"},{\"version\":\"9.20.2.22\",\"status\":\"affected\"},{\"version\":\"9.16.4.62\",\"status\":\"affected\"},{\"version\":\"9.18.4.34\",\"status\":\"affected\"},{\"version\":\"9.20.3\",\"status\":\"affected\"},{\"version\":\"9.16.4.67\",\"status\":\"affected\"},{\"version\":\"9.16.4.70\",\"status\":\"affected\"},{\"version\":\"9.18.4.40\",\"status\":\"affected\"},{\"version\":\"9.23.1\",\"status\":\"affected\"},{\"version\":\"9.22.1.1\",\"status\":\"affected\"},{\"version\":\"9.16.4.71\",\"status\":\"affected\"},{\"version\":\"9.20.3.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.47\",\"status\":\"affected\"},{\"version\":\"9.20.3.7\",\"status\":\"affected\"},{\"version\":\"9.19.1.37\",\"status\":\"affected\"},{\"version\":\"9.16.4.76\",\"status\":\"affected\"},{\"version\":\"9.20.3.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.38\",\"status\":\"affected\"},{\"version\":\"9.18.4.50\",\"status\":\"affected\"},{\"version\":\"9.22.1.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.10\",\"status\":\"affected\"},{\"version\":\"9.22.1.2\",\"status\":\"affected\"},{\"version\":\"9.18.4.52\",\"status\":\"affected\"},{\"version\":\"9.20.3.13\",\"status\":\"affected\"},{\"version\":\"9.22.1.6\",\"status\":\"affected\"},{\"version\":\"9.18.4.53\",\"status\":\"affected\"},{\"version\":\"9.16.4.82\",\"status\":\"affected\"},{\"version\":\"9.22.2\",\"status\":\"affected\"},{\"version\":\"9.20.3.16\",\"status\":\"affected\"},{\"version\":\"9.19.1.42\",\"status\":\"affected\"},{\"version\":\"9.18.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.84\",\"status\":\"affected\"},{\"version\":\"9.23.1.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.20\",\"status\":\"affected\"},{\"version\":\"9.22.2.4\",\"status\":\"affected\"},{\"version\":\"9.23.1.7\",\"status\":\"affected\"},{\"version\":\"9.20.4\",\"status\":\"affected\"},{\"version\":\"9.22.2.9\",\"status\":\"affected\"},{\"version\":\"9.23.1.13\",\"status\":\"affected\"},{\"version\":\"9.20.4.7\",\"status\":\"affected\"},{\"version\":\"9.22.2.13\",\"status\":\"affected\"},{\"version\":\"9.18.4.66\",\"status\":\"affected\"},{\"version\":\"9.20.4.10\",\"status\":\"affected\"},{\"version\":\"9.23.1.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.85\",\"status\":\"affected\"},{\"version\":\"9.22.2.14\",\"status\":\"affected\"},{\"version\":\"9.18.4.67\",\"status\":\"affected\"},{\"version\":\"9.24.1\",\"status\":\"affected\"},{\"version\":\"9.18.4.68\",\"status\":\"affected\"},{\"version\":\"9.23.1.22\",\"status\":\"affected\"},{\"version\":\"9.20.4.14\",\"status\":\"affected\"},{\"version\":\"9.22.2.20\",\"status\":\"affected\"},{\"version\":\"9.18.4.71\",\"status\":\"affected\"},{\"version\":\"9.20.4.19\",\"status\":\"affected\"},{\"version\":\"9.23.1.26\",\"status\":\"affected\"},{\"version\":\"9.16.4.89\",\"status\":\"affected\"},{\"version\":\"9.22.2.32\",\"status\":\"affected\"},{\"version\":\"9.18.4.76\",\"status\":\"affected\"},{\"version\":\"9.22.3\",\"status\":\"affected\"},{\"version\":\"9.24.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.4.22\",\"status\":\"affected\"},{\"version\":\"9.24.1.9\",\"status\":\"affected\"},{\"version\":\"9.20.4.28\",\"status\":\"affected\"},{\"version\":\"9.22.3.5\",\"status\":\"affected\"},{\"version\":\"9.16.4.92\",\"status\":\"affected\"},{\"version\":\"9.18.4.135\",\"status\":\"affected\"},{\"version\":\"9.23.1.195\",\"status\":\"affected\"},{\"version\":\"9.20.4.30\",\"status\":\"affected\"},{\"version\":\"9.24.1.155\",\"status\":\"affected\"},{\"version\":\"9.23.1.32\",\"status\":\"affected\"},{\"version\":\"9.24.1.11\",\"status\":\"affected\"},{\"version\":\"9.20.4.34\",\"status\":\"affected\"},{\"version\":\"9.18.4.82\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20349.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Threat Defense (FTD) Software\",\"versions\":[{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.6.0\",\"status\":\"affected\"},{\"version\":\"7.4.2\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.3\",\"status\":\"affected\"},{\"version\":\"7.4.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.9\",\"status\":\"affected\"},{\"version\":\"7.0.7\",\"status\":\"affected\"},{\"version\":\"7.7.0\",\"status\":\"affected\"},{\"version\":\"7.4.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.10\",\"status\":\"affected\"},{\"version\":\"7.6.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.3\",\"status\":\"affected\"},{\"version\":\"7.0.8\",\"status\":\"affected\"},{\"version\":\"7.6.2\",\"status\":\"affected\"},{\"version\":\"7.7.10\",\"status\":\"affected\"},{\"version\":\"7.7.11\",\"status\":\"affected\"},{\"version\":\"7.0.8.1\",\"status\":\"affected\"},{\"version\":\"7.6.2.1\",\"status\":\"affected\"},{\"version\":\"7.7.10.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.10.2\",\"status\":\"affected\"},{\"version\":\"7.4.3\",\"status\":\"affected\"},{\"version\":\"7.6.4\",\"status\":\"affected\"},{\"version\":\"10.0.0\",\"status\":\"affected\"},{\"version\":\"7.4.4\",\"status\":\"affected\"},{\"version\":\"7.0.9\",\"status\":\"affected\"},{\"version\":\"7.2.11\",\"status\":\"affected\"},{\"version\":\"7.4.7\",\"status\":\"affected\"},{\"version\":\"10.0.2\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-20349\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-20349（Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないリモート攻撃者が、影響を受けるデバイスのリモートアクセス SSL VPN サービスに細工した HTTP リクエストを送信できる。\n・Cisco Secure Firewall Adaptive Security Appliance (ASA) Software の S4 に列挙されたすべてのバージョンが影響を受ける。\n・Cisco Secure Firewall Threat Defense (FTD) Software の S5 に列挙されたすべてのバージョンが影響を受ける。\n・公式の対象表：Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.18.1。影響ありとして記載：9.16.3.15。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.18.2.5。影響ありとして記載：9.16.4。影響ありとして記載：9.18.2.7。影響ありとして記載：9.19.1。影響ありとして記載：9.16.4.9。影響ありとして記載：9.18.2.8。影響ありとして記載：9.16.4.14。影響ありとして記載：9.18.3。影響ありとして記載：9.19.1.5。影響ありとして記載：9.16.4.18。影響ありとして記載：9.19.1.9。影響ありとして記載：9.18.3.39。影響ありとして記載：9.16.4.19。影響ありとして記載：9.19.1.12。影響ありとして記載：9.18.3.46。影響ありとして記載：9.16.4.27。影響ありとして記載：9.19.1.18。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.18.3.56。影響ありとして記載：9.20.1。影響ありとして記載：9.16.4.42。影響ありとして記載：9.19.1.22。影響ありとして記載：9.18.4。影響ありとして記載：9.20.1.5。影響ありとして記載：9.18.4.5。影響ありとして記載：9.19.1.24。影響ありとして記載：9.16.4.48。影響ありとして記載：9.18.4.8。影響ありとして記載：9.20.2。影響ありとして記載：9.19.1.27。影響ありとして記載：9.16.4.55。影響ありとして記載：9.18.4.22。影響ありとして記載：9.20.2.10。影響ありとして記載：9.16.4.57。影響ありとして記載：9.19.1.28。影響ありとして記載：9.18.4.24。影響ありとして記載：9.20.2.21。影響ありとして記載：9.16.4.61。影響ありとして記載：9.19.1.31。影響ありとして記載：9.18.4.29。影響ありとして記載：9.20.2.22。影響ありとして記載：9.16.4.62。影響ありとして記載：9.18.4.34。影響ありとして記載：9.20.3。影響ありとして記載：9.16.4.67。影響ありとして記載：9.16.4.70。影響ありとして記載：9.18.4.40。影響ありとして記載：9.23.1。影響ありとして記載：9.22.1.1。影響ありとして記載：9.16.4.71。影響ありとして記載：9.20.3.4。影響ありとして記載：9.18.4.47。影響ありとして記載：9.20.3.7。影響ありとして記載：9.19.1.37。影響ありとして記載：9.16.4.76。影響ありとして記載：9.20.3.9。影響ありとして記載：9.19.1.38。影響ありとして記載：9.18.4.50。影響ありとして記載：9.22.1.3。影響ありとして記載：9.20.3.10。影響ありとして記載：9.22.1.2。影響ありとして記載：9.18.4.52。影響ありとして記載：9.20.3.13。影響ありとして記載：9.22.1.6。影響ありとして記載：9.18.4.53。影響ありとして記載：9.16.4.82。影響ありとして記載：9.22.2。影響ありとして記載：9.20.3.16。影響ありとして記載：9.19.1.42。影響ありとして記載：9.18.4.57。影響ありとして記載：9.16.4.84。影響ありとして記載：9.23.1.3。影響ありとして記載：9.20.3.20。影響ありとして記載：9.22.2.4。影響ありとして記載：9.23.1.7。影響ありとして記載：9.20.4。影響ありとして記載：9.22.2.9。影響ありとして記載：9.23.1.13。影響ありとして記載：9.20.4.7。影響ありとして記載：9.22.2.13。影響ありとして記載：9.18.4.66。影響ありとして記載：9.20.4.10。影響ありとして記載：9.23.1.19。影響ありとして記載：9.16.4.85。影響ありとして記載：9.22.2.14。影響ありとして記載：9.18.4.67。影響ありとして記載：9.24.1。影響ありとして記載：9.18.4.68。影響ありとして記載：9.23.1.22。影響ありとして記載：9.20.4.14。影響ありとして記載：9.22.2.20。影響ありとして記載：9.18.4.71。影響ありとして記載：9.20.4.19。影響ありとして記載：9.23.1.26。影響ありとして記載：9.16.4.89。影響ありとして記載：9.22.2.32。影響ありとして記載：9.18.4.76。影響ありとして記載：9.22.3。影響ありとして記載：9.24.1.5。影響ありとして記載：9.20.4.22。影響ありとして記載：9.24.1.9。影響ありとして記載：9.20.4.28。影響ありとして記載：9.22.3.5。影響ありとして記載：9.16.4.92。影響ありとして記載：9.18.4.135。影響ありとして記載：9.23.1.195。影響ありとして記載：9.20.4.30。影響ありとして記載：9.24.1.155。影響ありとして記載：9.23.1.32。影響ありとして記載：9.24.1.11。影響ありとして記載：9.20.4.34。影響ありとして記載：9.18.4.82。個別に記されていない版の影響は、原資料でも未確定です。\n・公式の対象表：Cisco / Cisco Secure Firewall Threat Defense (FTD) Software。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.2.0。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.2.0.1。影響ありとして記載：7.0.4。影響ありとして記載：7.2.1。影響ありとして記載：7.0.5。影響ありとして記載：7.3.0。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.3.1。影響ありとして記載：7.2.4。影響ありとして記載：7.0.6。影響ありとして記載：7.2.5。影響ありとして記載：7.2.4.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。影響ありとして記載：7.0.6.1。影響ありとして記載：7.2.5.1。影響ありとして記載：7.4.1。影響ありとして記載：7.2.6。影響ありとして記載：7.0.6.2。影響ありとして記載：7.4.1.1。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.3.1.2。影響ありとして記載：7.2.8。影響ありとして記載：7.6.0。影響ありとして記載：7.4.2。影響ありとして記載：7.2.8.1。影響ありとして記載：7.0.6.3。影響ありとして記載：7.4.2.1。影響ありとして記載：7.2.9。影響ありとして記載：7.0.7。影響ありとして記載：7.7.0。影響ありとして記載：7.4.2.2。影響ありとして記載：7.2.10。影響ありとして記載：7.6.1。影響ありとして記載：7.4.2.3。影響ありとして記載：7.0.8。影響ありとして記載：7.6.2。影響ありとして記載：7.7.10。影響ありとして記載：7.7.11。影響ありとして記載：7.0.8.1。影響ありとして記載：7.6.2.1。影響ありとして記載：7.7.10.1。影響ありとして記載：7.4.2.4。影響ありとして記載：7.2.10.2。影響ありとして記載：7.4.3。影響ありとして記載：7.6.4。影響ありとして記載：10.0.0。影響ありとして記載：7.4.4。影響ありとして記載：7.0.9。影響ありとして記載：7.2.11。影響ありとして記載：7.4.7。影響ありとして記載：10.0.2。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20349", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:37:51.954Z", "lastSuccess": "2026-10-23T03:37:51.954Z", "sourceCheckedAt": "2026-10-23T02:43:47.504Z", "errorCode": null }, "glossary": [ { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-68820", "aliases": [], "title": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2：権限の奪取", "summary": "Windows Ancillary Function Driver for WinSock における Use‑After‑Free の脆弱性により、認可された攻撃者がローカルで権限を昇格させることができる。", "risk": "認可された攻撃者がローカルで権限を昇格させることができる。", "product": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2", "category": "windows", "component": "package", "severity": "high", "cvss": 7, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.9418（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.9121（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19044.0 / < 10.0.19044.7663（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.7663（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.7517（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.7517（環境: x64-based Systems）" }, { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.9168（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 Version 25H2", "range": ">= 10.0.26200.0 / < 10.0.26200.9168（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 26H1", "range": ">= 10.0.28000.0 / < 10.0.28000.2704（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2012", "range": ">= 6.2.9200.0 / < 6.2.9200.26280（環境: x64-based Systems）" }, { "product": "Windows Server 2012 (Server Core installation)", "range": ">= 6.2.9200.0 / < 6.2.9200.26280（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.23338（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.23338（環境: x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.9418（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.9418（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.9121（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.9121（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.5499（環境: x64-based Systems）" }, { "product": "Windows Server 2025", "range": ">= 10.0.26100.0 / < 10.0.26100.33296（環境: x64-based Systems）" }, { "product": "Windows Server 2025 (Server Core installation)", "range": ">= 10.0.26100.0 / < 10.0.26100.33296（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-68820", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820", "label": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68820", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2026-08-11T17:05:15.930Z", "modifiedAt": "2026-10-21T20:52:47.921Z", "fetchedAt": "2026-10-23T02:43:50.096Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9418", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9121", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19044.0", "lessThan": "10.0.19044.7663", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.7663", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.7517", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.7517", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.9168", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26200.0", "lessThan": "10.0.26200.9168", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.28000.0", "lessThan": "10.0.28000.2704", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.26280", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.26280", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.23338", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.23338", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9418", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9418", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9121", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9121", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.5499", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.33296", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.33296", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-68820", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "fetchedAt": "2026-10-23T02:43:50.096Z", "publishedAt": "2026-08-11T17:05:15.930Z", "modifiedAt": "2026-10-21T20:52:47.921Z", "state": "published", "provider": "microsoft", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9418", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9121", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.19044.0", "lessThan": "10.0.19044.7663", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.7663", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.7517", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.7517", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.9168", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.26200.0", "lessThan": "10.0.26200.9168", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "sourcePath": "/containers/cna/affected/8", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.28000.0", "lessThan": "10.0.28000.2704", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "sourcePath": "/containers/cna/affected/9", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.26280", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.26280", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.23338", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.23338", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9418", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9418", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9121", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9121", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.5499", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.33296", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.33296", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-416", "lang": "en-US", "description": "CWE-416: Use After Free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820", "label": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-68820", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9121\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7663\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7663\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7517\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7517\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.9168\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.9168\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.2704\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26280\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26280\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23338\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23338\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9121\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9121\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5499\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33296\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33296\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-416: Use After Free\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-416\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7,\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-21T20:52:47.921Z", "fetchedAt": "2026-10-23T02:43:50.096Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-11T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:58.273Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "87c2f8610bf3fbcbb7ec74592760e706123fdc579bb96b79043781efe08c5993", "sourceModifiedAt": "2026-10-21T20:52:47.921Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows Ancillary Function Driver for WinSock における Use‑After‑Free の脆弱性により、認可された攻撃者がローカルで権限を昇格させることができる。", "risk": "認可された攻撃者がローカルで権限を昇格させることができる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Windows 10 Version 1607 の 32-bit および x64 系統で、バージョン 10.0.14393.0 以上 10.0.14393.9418 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "Windows 10 Version 1809 の 32-bit および x64 系統で、バージョン 10.0.17763.0 以上 10.0.17763.9121 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E4", "E1" ] }, { "text": "Windows 10 Version 21H2 の 32-bit、ARM64、x64 系統で、バージョン 10.0.19044.0 以上 10.0.19044.7663 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E5", "E1" ] }, { "text": "Windows 10 Version 22H2 の 32-bit、ARM64、x64 系統で、バージョン 10.0.19045.0 以上 10.0.19045.7663 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E6", "E1" ] }, { "text": "Windows 11 version 23H2 の ARM64 系統で、バージョン 10.0.22631.0 以上 10.0.22631.7517 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E7", "E1" ] }, { "text": "Windows 11 Version 23H2 の x64 系統で、バージョン 10.0.22631.0 以上 10.0.22631.7517 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E8", "E1" ] }, { "text": "Windows 11 Version 24H2 の ARM64 および x64 系統で、バージョン 10.0.26100.0 以上 10.0.26100.9168 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E9", "E1" ] }, { "text": "Windows 11 Version 25H2 の ARM64 および x64 系統で、バージョン 10.0.26200.0 以上 10.0.26200.9168 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E10", "E1" ] }, { "text": "Windows 11 version 26H1 の ARM64 および x64 系統で、バージョン 10.0.28000.0 以上 10.0.28000.2704 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E11", "E1" ] }, { "text": "Windows Server 2012 の x64 系統で、バージョン 6.2.9200.0 以上 6.2.9200.26280 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E12", "E1" ] }, { "text": "Windows Server 2012 (Server Core インストール) の x64 系統で、バージョン 6.2.9200.0 以上 6.2.9200.26280 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E13", "E1" ] }, { "text": "Windows Server 2012 R2 の x64 系統で、バージョン 6.3.9600.0 以上 6.3.9600.23338 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E14", "E1" ] }, { "text": "Windows Server 2012 R2 (Server Core インストール) の x64 系統で、バージョン 6.3.9600.0 以上 6.3.9600.23338 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E15", "E1" ] }, { "text": "Windows Server 2016 の x64 系統で、バージョン 10.0.14393.0 以上 10.0.14393.9418 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E16", "E1" ] }, { "text": "Windows Server 2016 (Server Core インストール) の x64 系統で、バージョン 10.0.14393.0 以上 10.0.14393.9418 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E17", "E1" ] }, { "text": "Windows Server 2019 の x64 系統で、バージョン 10.0.17763.0 以上 10.0.17763.9121 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E18", "E1" ] }, { "text": "Windows Server 2019 (Server Core インストール) の x64 系統で、バージョン 10.0.17763.0 以上 10.0.17763.9121 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E19", "E1" ] }, { "text": "Windows Server 2022 の x64 系統で、バージョン 10.0.20348.0 以上 10.0.20348.5499 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E20", "E1" ] }, { "text": "Windows Server 2025 の x64 系統で、バージョン 10.0.26100.0 以上 10.0.26100.33296 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E21", "E1" ] }, { "text": "Windows Server 2025 (Server Core インストール) の x64 系統で、バージョン 10.0.26100.0 以上 10.0.26100.33296 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E22", "E1" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9418未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.9121未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7663未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7663未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7517未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7517未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.9168未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.9168未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.2704未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.26280未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.26280未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.23338未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.23338未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9418未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9418未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.9121未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.9121未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5499未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.33296未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.33296未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E22" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820" ], "evidenceIds": [ "E23" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2026-68820", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-68820" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-68820", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820", "label": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68820", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9121\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7663\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7663\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7517\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7517\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.9168\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.9168\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.2704\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26280\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26280\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23338\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23338\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9418\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9121\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9121\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5499\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33296\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68820.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33296\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-68820\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-68820（Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 Version 1607 の 32-bit および x64 系統で、バージョン 10.0.14393.0 以上 10.0.14393.9418 未満は影響を受ける。\n・Windows 10 Version 1809 の 32-bit および x64 系統で、バージョン 10.0.17763.0 以上 10.0.17763.9121 未満は影響を受ける。\n・Windows 10 Version 21H2 の 32-bit、ARM64、x64 系統で、バージョン 10.0.19044.0 以上 10.0.19044.7663 未満は影響を受ける。\n・Windows 10 Version 22H2 の 32-bit、ARM64、x64 系統で、バージョン 10.0.19045.0 以上 10.0.19045.7663 未満は影響を受ける。\n・Windows 11 version 23H2 の ARM64 系統で、バージョン 10.0.22631.0 以上 10.0.22631.7517 未満は影響を受ける。\n・Windows 11 Version 23H2 の x64 系統で、バージョン 10.0.22631.0 以上 10.0.22631.7517 未満は影響を受ける。\n・Windows 11 Version 24H2 の ARM64 および x64 系統で、バージョン 10.0.26100.0 以上 10.0.26100.9168 未満は影響を受ける。\n・Windows 11 Version 25H2 の ARM64 および x64 系統で、バージョン 10.0.26200.0 以上 10.0.26200.9168 未満は影響を受ける。\n・Windows 11 version 26H1 の ARM64 および x64 系統で、バージョン 10.0.28000.0 以上 10.0.28000.2704 未満は影響を受ける。\n・Windows Server 2012 の x64 系統で、バージョン 6.2.9200.0 以上 6.2.9200.26280 未満は影響を受ける。\n・Windows Server 2012 (Server Core インストール) の x64 系統で、バージョン 6.2.9200.0 以上 6.2.9200.26280 未満は影響を受ける。\n・Windows Server 2012 R2 の x64 系統で、バージョン 6.3.9600.0 以上 6.3.9600.23338 未満は影響を受ける。\n・Windows Server 2012 R2 (Server Core インストール) の x64 系統で、バージョン 6.3.9600.0 以上 6.3.9600.23338 未満は影響を受ける。\n・Windows Server 2016 の x64 系統で、バージョン 10.0.14393.0 以上 10.0.14393.9418 未満は影響を受ける。\n・Windows Server 2016 (Server Core インストール) の x64 系統で、バージョン 10.0.14393.0 以上 10.0.14393.9418 未満は影響を受ける。\n・Windows Server 2019 の x64 系統で、バージョン 10.0.17763.0 以上 10.0.17763.9121 未満は影響を受ける。\n・Windows Server 2019 (Server Core インストール) の x64 系統で、バージョン 10.0.17763.0 以上 10.0.17763.9121 未満は影響を受ける。\n・Windows Server 2022 の x64 系統で、バージョン 10.0.20348.0 以上 10.0.20348.5499 未満は影響を受ける。\n・Windows Server 2025 の x64 系統で、バージョン 10.0.26100.0 以上 10.0.26100.33296 未満は影響を受ける。\n・Windows Server 2025 (Server Core インストール) の x64 系統で、バージョン 10.0.26100.0 以上 10.0.26100.33296 未満は影響を受ける。\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9418未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.9121未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7663未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7663未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7517未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7517未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.9168未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.9168未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.2704未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.26280未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.26280未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.23338未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.23338未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9418未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9418未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.9121未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.9121未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5499未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.33296未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.33296未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-68820", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:58.273Z", "lastSuccess": "2026-10-23T03:22:58.273Z", "sourceCheckedAt": "2026-10-23T02:43:50.096Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-72898", "aliases": [], "title": "Metabase：データベースへの不正操作", "summary": "Metabase は、リモートの認証されていない攻撃者が '/reset_password' エンドポイントを通じて任意の SQL を注入でき、接続された Metabase インスタンスの管理者権限を取得できるようになっています。", "risk": "攻撃者が管理者権限を取得し、Metabase インスタンス上で任意の操作が可能になる。", "product": "Metabase", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "4.0", "cvssSource": "cisa-cg", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "Metabase", "range": ">= x.58.0 / < x.58.24" }, { "product": "Metabase", "range": ">= x.59.0 / < x.59.21" }, { "product": "Metabase", "range": ">= x.60.0 / < x.60.17" }, { "product": "Metabase", "range": ">= x.61.0 / < x.61.11" }, { "product": "Metabase", "range": ">= x.62.0 / < x.62.9" }, { "product": "Metabase", "range": ">= x.63.0 / < x.63.5" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-72898", "label": "url" }, { "url": "https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "label": "CISAが示す関連情報" }, { "url": "https://www.metabase.com/blog/security-update", "label": "CISAが示す関連情報" }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.json", "label": "url" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72898", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-10T17:55:54.841Z", "modifiedAt": "2026-08-12T14:50:08.735Z", "fetchedAt": "2026-10-23T02:43:50.433Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.", "sourceTitle": "Metabase SQL injection via password reset endpoint", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Metabase", "product": "Metabase", "defaultStatus": "unknown", "versions": [ { "version": "x.58.0", "status": "affected", "lessThan": "x.58.24", "versionType": "custom" }, { "version": "x.58.24", "status": "unaffected" }, { "version": "x.59.0", "status": "affected", "lessThan": "x.59.21", "versionType": "custom" }, { "version": "x.59.21", "status": "unaffected" }, { "version": "x.60.0", "status": "affected", "lessThan": "x.60.17", "versionType": "custom" }, { "version": "x.60.17", "status": "unaffected" }, { "version": "x.61.0", "status": "affected", "lessThan": "x.61.11", "versionType": "custom" }, { "version": "x.61.11", "status": "unaffected" }, { "version": "x.62.0", "status": "affected", "lessThan": "x.62.9", "versionType": "custom" }, { "version": "x.62.9", "status": "unaffected" }, { "version": "x.63.0", "status": "affected", "lessThan": "x.63.5", "versionType": "custom" }, { "version": "x.63.5", "status": "unaffected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-72898", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "fetchedAt": "2026-10-23T02:43:50.433Z", "publishedAt": "2026-08-10T17:55:54.841Z", "modifiedAt": "2026-08-12T14:50:08.735Z", "state": "published", "provider": "cisa-cg", "title": "Metabase SQL injection via password reset endpoint", "descriptions": [ { "lang": "en", "value": "Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Metabase", "product": "Metabase", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "x.58.0", "lessThan": "x.58.24", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "x.58.24", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "x.59.0", "lessThan": "x.59.21", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "x.59.21", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "x.60.0", "lessThan": "x.60.17", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "x.60.17", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "x.61.0", "lessThan": "x.61.11", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "x.61.11", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "x.62.0", "lessThan": "x.62.9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "x.62.9", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "x.63.0", "lessThan": "x.63.5", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "x.63.5", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-89", "lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "label": "url", "tags": [ "vendor-advisory" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.metabase.com/blog/security-update", "label": "url", "tags": [ "vendor-advisory" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-72898", "label": "url", "tags": [ "vdb-entry" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/2" }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.json", "label": "url", "tags": [ "third-party-advisory" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72898", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Metabase\",\"product\":\"Metabase\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"x.58.0\",\"status\":\"affected\",\"lessThan\":\"x.58.24\",\"versionType\":\"custom\"},{\"version\":\"x.58.24\",\"status\":\"unaffected\"},{\"version\":\"x.59.0\",\"status\":\"affected\",\"lessThan\":\"x.59.21\",\"versionType\":\"custom\"},{\"version\":\"x.59.21\",\"status\":\"unaffected\"},{\"version\":\"x.60.0\",\"status\":\"affected\",\"lessThan\":\"x.60.17\",\"versionType\":\"custom\"},{\"version\":\"x.60.17\",\"status\":\"unaffected\"},{\"version\":\"x.61.0\",\"status\":\"affected\",\"lessThan\":\"x.61.11\",\"versionType\":\"custom\"},{\"version\":\"x.61.11\",\"status\":\"unaffected\"},{\"version\":\"x.62.0\",\"status\":\"affected\",\"lessThan\":\"x.62.9\",\"versionType\":\"custom\"},{\"version\":\"x.62.9\",\"status\":\"unaffected\"},{\"version\":\"x.63.0\",\"status\":\"affected\",\"lessThan\":\"x.63.5\",\"versionType\":\"custom\"},{\"version\":\"x.63.5\",\"status\":\"unaffected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\",\"lang\":\"en\",\"type\":\"CWE\",\"cweId\":\"CWE-89\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"version\":\"4.0\",\"baseScore\":10,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"subIntegrityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":10,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-12T14:50:08.735Z", "fetchedAt": "2026-10-23T02:43:50.433Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-11T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Metabaseにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:58.339Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b48cf699e28bf4a0935e7436b353b6b558bdac4d4aa516faa90b0ef1ff57d8e4", "sourceModifiedAt": "2026-08-12T14:50:08.735Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Metabase は、リモートの認証されていない攻撃者が '/reset_password' エンドポイントを通じて任意の SQL を注入でき、接続された Metabase インスタンスの管理者権限を取得できるようになっています。", "risk": "攻撃者が管理者権限を取得し、Metabase インスタンス上で任意の操作が可能になる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "リモートの認証されていない攻撃者が対象となります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "'/reset_password' データベースエンドポイントが存在することが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Metabase バージョン x.58.0 以上 x.58.24 未満 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Metabase バージョン x.59.0 以上 x.59.21 未満 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Metabase バージョン x.60.0 以上 x.60.17 未満 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Metabase バージョン x.61.0 以上 x.61.11 未満 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Metabase バージョン x.62.0 以上 x.62.9 未満 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Metabase バージョン x.63.0 以上 x.63.5 未満 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：Metabase / Metabase。影響ありとして記載：x.58.0以上、x.58.24未満。影響なしとして記載：x.58.24。影響ありとして記載：x.59.0以上、x.59.21未満。影響なしとして記載：x.59.21。影響ありとして記載：x.60.0以上、x.60.17未満。影響なしとして記載：x.60.17。影響ありとして記載：x.61.0以上、x.61.11未満。影響なしとして記載：x.61.11。影響ありとして記載：x.62.0以上、x.62.9未満。影響なしとして記載：x.62.9。影響ありとして記載：x.63.0以上、x.63.5未満。影響なしとして記載：x.63.5。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Metabase」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72898", "https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "https://www.metabase.com/blog/security-update", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72898" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-72898", "https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "https://www.metabase.com/blog/security-update", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72898" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-72898", "https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "https://www.metabase.com/blog/security-update", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-72898" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-72898", "label": "url" }, { "url": "https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "label": "CISAが示す関連情報" }, { "url": "https://www.metabase.com/blog/security-update", "label": "CISAが示す関連情報" }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.json", "label": "url" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72898", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourceField": "/containers/cna/title", "excerpt": "Metabase SQL injection via password reset endpoint", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72898.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Metabase\",\"product\":\"Metabase\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"x.58.0\",\"status\":\"affected\",\"lessThan\":\"x.58.24\",\"versionType\":\"custom\"},{\"version\":\"x.58.24\",\"status\":\"unaffected\"},{\"version\":\"x.59.0\",\"status\":\"affected\",\"lessThan\":\"x.59.21\",\"versionType\":\"custom\"},{\"version\":\"x.59.21\",\"status\":\"unaffected\"},{\"version\":\"x.60.0\",\"status\":\"affected\",\"lessThan\":\"x.60.17\",\"versionType\":\"custom\"},{\"version\":\"x.60.17\",\"status\":\"unaffected\"},{\"version\":\"x.61.0\",\"status\":\"affected\",\"lessThan\":\"x.61.11\",\"versionType\":\"custom\"},{\"version\":\"x.61.11\",\"status\":\"unaffected\"},{\"version\":\"x.62.0\",\"status\":\"affected\",\"lessThan\":\"x.62.9\",\"versionType\":\"custom\"},{\"version\":\"x.62.9\",\"status\":\"unaffected\"},{\"version\":\"x.63.0\",\"status\":\"affected\",\"lessThan\":\"x.63.5\",\"versionType\":\"custom\"},{\"version\":\"x.63.5\",\"status\":\"unaffected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-72898\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-72898（Metabase）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・リモートの認証されていない攻撃者が対象となります。\n・'/reset_password' データベースエンドポイントが存在することが前提です。\n・Metabase バージョン x.58.0 以上 x.58.24 未満 が影響を受けます。\n・Metabase バージョン x.59.0 以上 x.59.21 未満 が影響を受けます。\n・Metabase バージョン x.60.0 以上 x.60.17 未満 が影響を受けます。\n・Metabase バージョン x.61.0 以上 x.61.11 未満 が影響を受けます。\n・Metabase バージョン x.62.0 以上 x.62.9 未満 が影響を受けます。\n・Metabase バージョン x.63.0 以上 x.63.5 未満 が影響を受けます。\n・公式の対象表：Metabase / Metabase。影響ありとして記載：x.58.0以上、x.58.24未満。影響なしとして記載：x.58.24。影響ありとして記載：x.59.0以上、x.59.21未満。影響なしとして記載：x.59.21。影響ありとして記載：x.60.0以上、x.60.17未満。影響なしとして記載：x.60.17。影響ありとして記載：x.61.0以上、x.61.11未満。影響なしとして記載：x.61.11。影響ありとして記載：x.62.0以上、x.62.9未満。影響なしとして記載：x.62.9。影響ありとして記載：x.63.0以上、x.63.5未満。影響なしとして記載：x.63.5。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-72898", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:58.339Z", "lastSuccess": "2026-10-23T03:22:58.339Z", "sourceCheckedAt": "2026-10-23T02:43:50.433Z", "errorCode": null }, "glossary": [ { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-8037", "aliases": [], "title": "LoadMaster / ECS Connections Manager / Object Scale Connection Manager / MOVEit WAF：コード実行", "summary": "Progress ADC 製品の API において、認証されていない攻撃者が複数のコマンドエンドポイントに対しサニタイズされていない入力を利用し、LoadMaster アプライアンス上で任意のコマンドを実行できる OS コマンドインジェクションによるリモートコード実行脆弱性が存在する。", "risk": "攻撃者が任意のコマンドを実行できるため、サーバー上で不正な処理が行われ、システムが乗っ取られる可能性がある。", "product": "LoadMaster / ECS Connections Manager / Object Scale Connection Manager / MOVEit WAF", "category": "other", "component": "package", "severity": "critical", "cvss": 9.6, "cvssVersion": "3.1", "cvssSource": "ProgressSoftware", "cvssVector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "LoadMaster", "range": ">= V7.2.60.0 / < V7.2.63.2" }, { "product": "LoadMaster", "range": ">= V7.2.54.12 / < V7.2.54.18" }, { "product": "ECS Connections Manager", "range": ">= V7.2.60.0 / < V7.2.63.2" }, { "product": "Object Scale Connection Manager", "range": ">= V7.2.60.0 / < V7.2.63.2" }, { "product": "MOVEit WAF", "range": ">= V7.2.60.0 / < V7.2.63.2" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "label": "CVE：ProgressSoftware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-8037", "label": "CVE公式レコード" }, { "url": "https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8037", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-06-04T13:13:45.793Z", "modifiedAt": "2026-10-15T13:20:45.089Z", "fetchedAt": "2026-10-23T02:43:51.004Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints", "sourceTitle": "OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Progress Software", "product": "LoadMaster", "versions": [ { "status": "affected", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom" }, { "status": "affected", "version": "V7.2.54.12", "lessThan": "V7.2.54.18", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Progress Software", "product": "ECS Connections Manager", "versions": [ { "status": "affected", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Progress Software", "product": "Object Scale Connection Manager", "versions": [ { "status": "affected", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Progress Software", "product": "MOVEit WAF", "versions": [ { "status": "affected", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-8037", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "fetchedAt": "2026-10-23T02:43:51.004Z", "publishedAt": "2026-06-04T13:13:45.793Z", "modifiedAt": "2026-10-15T13:20:45.089Z", "state": "published", "provider": "ProgressSoftware", "title": "OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF", "descriptions": [ { "lang": "en", "value": "OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Progress Software", "product": "LoadMaster", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "V7.2.54.12", "lessThan": "V7.2.54.18", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Progress Software", "product": "ECS Connections Manager", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Progress Software", "product": "Object Scale Connection Manager", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Progress Software", "product": "MOVEit WAF", "sourcePath": "/containers/cna/affected/3", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "V7.2.60.0", "lessThan": "V7.2.63.2", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.6, "baseSeverity": "CRITICAL", "provider": "ProgressSoftware", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691", "label": "ProgressSoftware", "tags": [ "vendor-advisory" ], "provider": "ProgressSoftware", "sourcePath": "/containers/cna/references/0" }, { "url": "https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/", "label": "CISA-ADP", "tags": [ "third-party-advisory", "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.esentire.com/security-advisories/progress-kemp-loadmaster-vulnerability-targeted-cve-2026-8037", "label": "CISA-ADP", "tags": [ "media-coverage" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8037", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Progress Software\",\"product\":\"LoadMaster\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V7.2.54.12\",\"lessThan\":\"V7.2.54.18\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Progress Software\",\"product\":\"ECS Connections Manager\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Progress Software\",\"product\":\"Object Scale Connection Manager\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Progress Software\",\"product\":\"MOVEit WAF\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-77\",\"description\":\"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.6,\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T13:20:45.089Z", "fetchedAt": "2026-10-23T02:43:51.004Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-07T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "LoadMaster / ECS Connections Manager / Object Scale Connection Manager / MOVEit WAFにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:59.191Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "29cba0e61c574567660d649c7bd8cece76d25548b97faf95c0db65c655290f21", "sourceModifiedAt": "2026-10-15T13:20:45.089Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Progress ADC 製品の API において、認証されていない攻撃者が複数のコマンドエンドポイントに対しサニタイズされていない入力を利用し、LoadMaster アプライアンス上で任意のコマンドを実行できる OS コマンドインジェクションによるリモートコード実行脆弱性が存在する。", "risk": "攻撃者が任意のコマンドを実行できるため、サーバー上で不正な処理が行われ、システムが乗っ取られる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "LoadMaster はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "LoadMaster はバージョン V7.2.54.12 以上 V7.2.54.18 未満 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "ECS Connections Manager はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Object Scale Connection Manager はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "MOVEit WAF はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E6", "E2" ] }, { "text": "公式の対象表：Progress Software / LoadMaster。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。影響ありとして記載：V7.2.54.12以上、V7.2.54.18未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Progress Software / ECS Connections Manager。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Progress Software / Object Scale Connection Manager。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Progress Software / MOVEit WAF。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E3" ] }, { "text": "「LoadMaster / ECS Connections Manager / Object Scale Connection Manager / MOVEit WAF」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-8037", "https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-8037" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-8037", "https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-8037" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-8037", "https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-8037" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "label": "CVE：ProgressSoftware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-8037", "label": "CVE公式レコード" }, { "url": "https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8037", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourceField": "/containers/cna/title", "excerpt": "OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Progress Software\",\"product\":\"LoadMaster\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V7.2.54.12\",\"lessThan\":\"V7.2.54.18\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Progress Software\",\"product\":\"ECS Connections Manager\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Progress Software\",\"product\":\"Object Scale Connection Manager\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8037.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Progress Software\",\"product\":\"MOVEit WAF\",\"versions\":[{\"status\":\"affected\",\"version\":\"V7.2.60.0\",\"lessThan\":\"V7.2.63.2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-8037\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-8037（LoadMaster / ECS Connections Manager / Object Scale Connection Manager / MOVEit WAF）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・LoadMaster はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。\n・LoadMaster はバージョン V7.2.54.12 以上 V7.2.54.18 未満 が影響を受ける。\n・ECS Connections Manager はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。\n・Object Scale Connection Manager はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。\n・MOVEit WAF はバージョン V7.2.60.0 以上 V7.2.63.2 未満 が影響を受ける。\n・公式の対象表：Progress Software / LoadMaster。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。影響ありとして記載：V7.2.54.12以上、V7.2.54.18未満。\n・公式の対象表：Progress Software / ECS Connections Manager。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。\n・公式の対象表：Progress Software / Object Scale Connection Manager。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。\n・公式の対象表：Progress Software / MOVEit WAF。影響ありとして記載：V7.2.60.0以上、V7.2.63.2未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-8037", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:59.191Z", "lastSuccess": "2026-10-23T03:22:59.191Z", "sourceCheckedAt": "2026-10-23T02:43:51.004Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-63077", "aliases": [], "title": "TeamCity：コード実行", "summary": "JetBrains TeamCity の 2026.1.3 未満および 2025.11.7 未満のバージョンでは、認証されていない攻撃者がエージェントのポーリングプロトコルを通じてリモートコード実行を行うことが可能です。", "risk": "認証なしでリモートコード実行が可能になるため、攻撃者がサーバー上で任意のコードを実行できる危険があります。", "product": "TeamCity", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "JetBrains", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "TeamCity", "range": "< 2026.1.3, 2025.11.7" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "label": "CVE：JetBrains" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-63077", "label": "CVE公式レコード" }, { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CISAが示す関連情報" }, { "url": "https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63077", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-07-27T16:44:32.290Z", "modifiedAt": "2026-09-23T03:55:33.804Z", "fetchedAt": "2026-10-23T02:43:49.866Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "JetBrains", "product": "TeamCity", "versions": [ { "version": "0", "status": "affected", "lessThan": "2026.1.3, 2025.11.7", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-63077", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "fetchedAt": "2026-10-23T02:43:49.866Z", "publishedAt": "2026-07-27T16:44:32.290Z", "modifiedAt": "2026-09-23T03:55:33.804Z", "state": "published", "provider": "JetBrains", "title": "", "descriptions": [ { "lang": "en", "value": "In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "JetBrains", "product": "TeamCity", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "2026.1.3, 2025.11.7", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "CWE-502", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "JetBrains", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "JetBrains", "tags": [], "provider": "JetBrains", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63077", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"JetBrains\",\"product\":\"TeamCity\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2026.1.3, 2025.11.7\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-502\",\"cweId\":\"CWE-502\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-23T03:55:33.804Z", "fetchedAt": "2026-10-23T02:43:49.866Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-05T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "TeamCityにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:59.201Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ba69126beff19914203c8ceb2d9a2e47c3acf206ca055b32a92f10c88a24cd33", "sourceModifiedAt": "2026-09-23T03:55:33.804Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "JetBrains TeamCity の 2026.1.3 未満および 2025.11.7 未満のバージョンでは、認証されていない攻撃者がエージェントのポーリングプロトコルを通じてリモートコード実行を行うことが可能です。", "risk": "認証なしでリモートコード実行が可能になるため、攻撃者がサーバー上で任意のコードを実行できる危険があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "TeamCity 2026.1.3 未満のバージョンが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json" ], "evidenceIds": [ "E2" ] }, { "text": "TeamCity 2025.11.7 未満のバージョンが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：JetBrains / TeamCity。影響ありとして記載：2026.1.3, 2025.11.7未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json" ], "evidenceIds": [ "E2" ] }, { "text": "「TeamCity」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-63077", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077", "https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-63077" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-63077", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077", "https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-63077" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-63077", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077", "https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-63077" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "label": "CVE：JetBrains" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-63077", "label": "CVE公式レコード" }, { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CISAが示す関連情報" }, { "url": "https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63077", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63077.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"JetBrains\",\"product\":\"TeamCity\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2026.1.3, 2025.11.7\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-63077", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-63077\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-63077（TeamCity）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・TeamCity 2026.1.3 未満のバージョンが影響を受けます。\n・TeamCity 2025.11.7 未満のバージョンが影響を受けます。\n・公式の対象表：JetBrains / TeamCity。影響ありとして記載：2026.1.3, 2025.11.7未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-63077", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:59.201Z", "lastSuccess": "2026-10-23T03:22:59.201Z", "sourceCheckedAt": "2026-10-23T02:43:49.866Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-18556", "aliases": [], "title": "N-central：認証の回避", "summary": "N-able N-centralにおいて、代替経路やチャネルの脆弱性により認証バイパスが可能で、認証されていない攻撃者が管理者アカウントを取得できる。影響は2026.1までのバージョンに及ぶ。", "risk": "攻撃者が認証なしで管理者アカウントを取得できる可能性がある。", "product": "N-central", "category": "other", "component": "package", "severity": "high", "cvss": 8.2, "cvssVersion": "4.0", "cvssSource": "N-able", "cvssVector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "affected": [ { "product": "N-central", "range": "<= 2026.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "label": "CVE：N-able" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-18556", "label": "CVE公式レコード" }, { "url": "https://uptime.n-able.com/", "label": "CISAが示す関連情報" }, { "url": "https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18556", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-01T19:59:30.913Z", "modifiedAt": "2026-08-05T03:56:07.447Z", "fetchedAt": "2026-10-23T02:43:46.920Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.", "sourceTitle": "Unauthenticated administrative account takeover", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "N-able", "product": "N-central", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2026.1", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-18556", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "fetchedAt": "2026-10-23T02:43:46.920Z", "publishedAt": "2026-08-01T19:59:30.913Z", "modifiedAt": "2026-08-05T03:56:07.447Z", "state": "published", "provider": "N-able", "title": "Unauthenticated administrative account takeover", "descriptions": [ { "lang": "en", "value": "Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "N-able", "product": "N-central", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "2026.1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-288", "lang": "en", "description": "CWE-288 Authentication bypass using an alternate path or channel", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "baseScore": 8.2, "baseSeverity": "HIGH", "provider": "N-able", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://uptime.n-able.com/", "label": "N-able", "tags": [], "provider": "N-able", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.n-able.com/blog/n-central-security-update-august-2-2026", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18556", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"N-able\",\"product\":\"N-central\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"2026.1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-288\",\"description\":\"CWE-288 Authentication bypass using an alternate path or channel\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.2,\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-05T03:56:07.447Z", "fetchedAt": "2026-10-23T02:43:46.920Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-04T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "N-centralに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:59.241Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "63491c4eabc39f89380e9d9bf4f3a6f9f42aaa6c8588a48a87c88a3f843b9dfa", "sourceModifiedAt": "2026-08-05T03:56:07.447Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "N-able N-centralにおいて、代替経路やチャネルの脆弱性により認証バイパスが可能で、認証されていない攻撃者が管理者アカウントを取得できる。影響は2026.1までのバージョンに及ぶ。", "risk": "攻撃者が認証なしで管理者アカウントを取得できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "N-centralのバージョンが2026.1以前（2026.1を含む）である場合に影響する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json" ], "evidenceIds": [ "E2", "E3", "E1" ] }, { "text": "公式の対象表：N-able / N-central。影響ありとして記載：2026.1以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json" ], "evidenceIds": [ "E3" ] }, { "text": "「N-central」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-18556", "https://uptime.n-able.com/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556", "https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-18556" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-18556", "https://uptime.n-able.com/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556", "https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-18556" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-18556", "https://uptime.n-able.com/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556", "https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-18556" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "label": "CVE：N-able" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-18556", "label": "CVE公式レコード" }, { "url": "https://uptime.n-able.com/", "label": "CISAが示す関連情報" }, { "url": "https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18556", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "sourceField": "/containers/cna/title", "excerpt": "Unauthenticated administrative account takeover", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18556.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"N-able\",\"product\":\"N-central\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"2026.1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-18556", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-18556\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-18556（N-central）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・N-centralのバージョンが2026.1以前（2026.1を含む）である場合に影響する。\n・公式の対象表：N-able / N-central。影響ありとして記載：2026.1以下の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-18556", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:59.241Z", "lastSuccess": "2026-10-23T03:22:59.241Z", "sourceCheckedAt": "2026-10-23T02:43:46.920Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-34486", "aliases": [], "title": "Apache Tomcat：脆弱性情報", "summary": "Apache Tomcat において、CVE-2026-29146 の修正が EncryptInterceptor のバイパスを可能にし、機密データが暗号化されない脆弱性が発生しています。影響を受けるバージョンは 11.0.20、10.1.53、9.0.116 です。", "risk": "機密データが暗号化されないため、情報が漏洩するリスクがあります。", "product": "Apache Tomcat", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apache", "cvssVector": null, "affected": [ { "product": "Apache Tomcat", "range": "11.0.20" }, { "product": "Apache Tomcat", "range": "10.1.53" }, { "product": "Apache Tomcat", "range": "9.0.116" } ], "fixed": [], "steps": [ "影響を受けるバージョンを使用している場合は、11.0.21、10.1.54、または 9.0.117 にアップグレードすることが推奨されます。", "「CVE-2026-34486」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "label": "CVE：apache" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34486", "label": "CVE公式レコード" }, { "url": "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-09T19:35:35.994Z", "modifiedAt": "2026-09-21T19:43:41.203Z", "fetchedAt": "2026-10-23T02:43:48.442Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\n\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.", "sourceTitle": "Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Apache Tomcat", "vendor": "Apache Software Foundation", "versions": [ { "status": "affected", "version": "11.0.20", "versionType": "semver" }, { "status": "affected", "version": "10.1.53", "versionType": "semver" }, { "status": "affected", "version": "9.0.116", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-34486", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "fetchedAt": "2026-10-23T02:43:48.442Z", "publishedAt": "2026-04-09T19:35:35.994Z", "modifiedAt": "2026-09-21T19:43:41.203Z", "state": "published", "provider": "apache", "title": "Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor", "descriptions": [ { "lang": "en", "value": "Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\n\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Apache Software Foundation", "product": "Apache Tomcat", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "11.0.20", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "10.1.53", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.0.116", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-311", "lang": "en", "description": "CWE-311 Missing Encryption of Sensitive Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "label": "apache", "tags": [ "vendor-advisory" ], "provider": "apache", "sourcePath": "/containers/cna/references/0" }, { "url": "https://socradar.io/blog/snowlight-government-chinese-campaign/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34486", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2026-34486-detection-script-rce-on-apache-tomcat", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2026-34486-mitigation-script-rce-on-apache-tomcat", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-34486", "label": "redhat-SADP", "tags": [ "vdb-entry", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/0" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457027", "label": "RHBZ#2457027", "tags": [ "issue-tracking", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/1" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34486.json", "label": "redhat-SADP", "tags": [ "x_sadp-csaf-vex" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/2" }, { "url": "https://access.redhat.com/errata/RHSA-2026:39188", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/3" }, { "url": "https://access.redhat.com/errata/RHSA-2026:38505", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/4" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36787", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/5" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36789", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/6" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36788", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/7" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36790", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/8" }, { "url": "https://access.redhat.com/errata/RHSA-2026:37137", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/9" }, { "url": "https://access.redhat.com/errata/RHSA-2026:37136", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/10" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36878", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/11" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36876", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/12" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36877", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/13" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36879", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/14" }, { "url": "https://access.redhat.com/errata/RHSA-2026:39189", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/15" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Apache Tomcat\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"status\":\"affected\",\"version\":\"11.0.20\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"10.1.53\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"9.0.116\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\n\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-311\",\"description\":\"CWE-311 Missing Encryption of Sensitive Data\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/2/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourcePath": "/containers/adp/2/metrics/1/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-21T19:43:41.203Z", "fetchedAt": "2026-10-23T02:43:48.442Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-04T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Apache Tomcatに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:00.345Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "488ffd812ca12788599bac2d06959e6d71f093ebde32adf5f6b7fe9612133ea0", "sourceModifiedAt": "2026-09-21T19:43:41.203Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Apache Tomcat において、CVE-2026-29146 の修正が EncryptInterceptor のバイパスを可能にし、機密データが暗号化されない脆弱性が発生しています。影響を受けるバージョンは 11.0.20、10.1.53、9.0.116 です。", "risk": "機密データが暗号化されないため、情報が漏洩するリスクがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Apache Tomcat 11.0.20 はこの脆弱性の影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Apache Tomcat 10.1.53 はこの脆弱性の影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Apache Tomcat 9.0.116 はこの脆弱性の影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：Apache Software Foundation / Apache Tomcat。影響ありとして記載：11.0.20。影響ありとして記載：10.1.53。影響ありとして記載：9.0.116。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Apache Tomcat」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34486", "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-34486" ] } ], "actions": [ { "text": "影響を受けるバージョンを使用している場合は、11.0.21、10.1.54、または 9.0.117 にアップグレードすることが推奨されます。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2026-34486」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-34486", "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-34486" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34486", "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-34486" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-34486", "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-34486" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34486", "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-34486" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "label": "CVE：apache" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34486", "label": "CVE公式レコード" }, { "url": "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\n\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourceField": "/containers/cna/title", "excerpt": "Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34486.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Apache Tomcat\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"status\":\"affected\",\"version\":\"11.0.20\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"10.1.53\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"9.0.116\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34486", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-34486\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-34486（Apache Tomcat）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Apache Tomcat 11.0.20 はこの脆弱性の影響を受けます。\n・Apache Tomcat 10.1.53 はこの脆弱性の影響を受けます。\n・Apache Tomcat 9.0.116 はこの脆弱性の影響を受けます。\n・公式の対象表：Apache Software Foundation / Apache Tomcat。影響ありとして記載：11.0.20。影響ありとして記載：10.1.53。影響ありとして記載：9.0.116。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-34486", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:00.345Z", "lastSuccess": "2026-10-23T03:23:00.345Z", "sourceCheckedAt": "2026-10-23T02:43:48.442Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-9198", "aliases": [], "title": "Langflow OSS：コード実行", "summary": "IBM Langflow OSS のバージョン 1.0.0 から 1.10.0 まででは、認証されていない攻撃者が /api/v1/auto_login エンドポイントを利用して任意のネットワーク呼び出し元に SUPERUSER トークンを発行させ、その後 /api/v1/validate/code エンドポイントで exec() によりユーザーコードを実行させることを組み合わせることで、デフォルトの Langflow 配備に対して完全なリモートコード実行を行える。", "risk": "完全なリモートコード実行が可能になる。", "product": "Langflow OSS", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "ibm", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Langflow OSS", "range": ">= 1.0.0 / <= 1.10.0" } ], "fixed": [], "steps": [ "Langflow OSS をバージョン 1.10.1 にアップグレードすることを強く推奨する。", "「CVE-2026-9198」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "label": "CVE：ibm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-9198", "label": "CVE公式レコード" }, { "url": "https://www.ibm.com/support/pages/node/7278927", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-07-17T17:36:11.246Z", "modifiedAt": "2026-08-17T19:10:55.374Z", "fetchedAt": "2026-10-23T02:43:52.379Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments", "sourceTitle": "Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "IBM", "product": "Langflow OSS", "versions": [ { "status": "affected", "version": "1.0.0", "lessThanOrEqual": "1.10.0", "versionType": "semver" } ], "defaultStatus": "unaffected", "cpes": [ "cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_oss:1.10.0:*:*:*:*:*:*:*" ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-9198", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "fetchedAt": "2026-10-23T02:43:52.379Z", "publishedAt": "2026-07-17T17:36:11.246Z", "modifiedAt": "2026-08-17T19:10:55.374Z", "state": "published", "provider": "ibm", "title": "Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation", "descriptions": [ { "lang": "en", "value": "IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "IBM", "product": "Langflow OSS", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_oss:1.10.0:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "1.0.0", "lessThanOrEqual": "1.10.0", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.10.1 https://pypi.org/project/langflow/", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "ibm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.ibm.com/support/pages/node/7278927", "label": "ibm", "tags": [ "vendor-advisory", "patch" ], "provider": "ibm", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9198", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"IBM\",\"product\":\"Langflow OSS\",\"versions\":[{\"status\":\"affected\",\"version\":\"1.0.0\",\"lessThanOrEqual\":\"1.10.0\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:langflow_oss:1.10.0:*:*:*:*:*:*:*\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.10.1 https://pypi.org/project/langflow/", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-94\",\"description\":\"CWE-94 Improper Control of Generation of Code ('Code Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-17T19:10:55.374Z", "fetchedAt": "2026-10-23T02:43:52.379Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-04T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "Langflow OSSにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:00.700Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b99381726eee946217dd9a2836ec50bdf1cbb4b3d08d6bf78660bde14ccad911", "sourceModifiedAt": "2026-08-17T19:10:55.374Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "IBM Langflow OSS のバージョン 1.0.0 から 1.10.0 まででは、認証されていない攻撃者が /api/v1/auto_login エンドポイントを利用して任意のネットワーク呼び出し元に SUPERUSER トークンを発行させ、その後 /api/v1/validate/code エンドポイントで exec() によりユーザーコードを実行させることを組み合わせることで、デフォルトの Langflow 配備に対して完全なリモートコード実行を行える。", "risk": "完全なリモートコード実行が可能になる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は IBM Langflow OSS のバージョン 1.0.0 から 1.10.0（含む）である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "デフォルトの Langflow デプロイメントで /api/v1/auto_login と /api/v1/validate/code エンドポイントが有効である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者は認証されていない状態でネットワークからこれらのエンドポイントにアクセスできる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：IBM / Langflow OSS。影響ありとして記載：1.0.0以上、1.10.0以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Langflow OSS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-9198", "https://www.ibm.com/support/pages/node/7278927", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-9198" ] } ], "actions": [ { "text": "Langflow OSS をバージョン 1.10.1 にアップグレードすることを強く推奨する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2026-9198」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-9198", "https://www.ibm.com/support/pages/node/7278927", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-9198" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-9198", "https://www.ibm.com/support/pages/node/7278927", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-9198" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-9198", "https://www.ibm.com/support/pages/node/7278927", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-9198" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-9198", "https://www.ibm.com/support/pages/node/7278927", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-9198" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "label": "CVE：ibm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-9198", "label": "CVE公式レコード" }, { "url": "https://www.ibm.com/support/pages/node/7278927", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourceField": "/containers/cna/title", "excerpt": "Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"IBM\",\"product\":\"Langflow OSS\",\"versions\":[{\"status\":\"affected\",\"version\":\"1.0.0\",\"lessThanOrEqual\":\"1.10.0\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:langflow_oss:1.10.0:*:*:*:*:*:*:*\"]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9198.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.10.1 https://pypi.org/project/langflow/", "language": "en", "representation": "source_excerpt" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9198", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-9198\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-9198（Langflow OSS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は IBM Langflow OSS のバージョン 1.0.0 から 1.10.0（含む）である。\n・デフォルトの Langflow デプロイメントで /api/v1/auto_login と /api/v1/validate/code エンドポイントが有効である。\n・攻撃者は認証されていない状態でネットワークからこれらのエンドポイントにアクセスできる。\n・公式の対象表：IBM / Langflow OSS。影響ありとして記載：1.0.0以上、1.10.0以下。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-9198", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:00.700Z", "lastSuccess": "2026-10-23T03:23:00.700Z", "sourceCheckedAt": "2026-10-23T02:43:52.379Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } } ], "total": 2188, "limit": 20, "offset": 460, "filters": { "product": "all", "type": "all", "q": "", "page": 24 }, "pagination": { "page": 24, "pageSize": 20, "totalPages": 110 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T16:17:50.069Z", "lastAttempt": "2026-10-23T16:17:50.069Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-23T16:17:50.069Z", "lastAttempt": "2026-10-23T16:17:50.069Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T16:17:50.069Z", "lastAttempt": "2026-10-23T16:17:50.069Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-23T16:17:50.069Z", "lastAttempt": "2026-10-23T16:17:50.069Z", "error": null, "recordCount": 29, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T14:02:50.525Z 〜 2026-10-23T16:17:50.069Z、全製品の変更 347/347件まで確認、対象29件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T16:17:50.069Z", "lastAttempt": "2026-10-23T16:17:50.069Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }