{
"schemaVersion": "1.0",
"publisher": "脆弱性ナビ",
"origin": "https://zeijaku.ittrip.xyz",
"terms": [
{
"name": "CVE Program",
"url": "https://www.cve.org/legal/termsofuse",
"notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.",
"licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."
},
{
"name": "NIST NVD",
"url": "https://nvd.nist.gov/general/faq",
"notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
},
{
"name": "JVN",
"url": "https://jvn.jp/contact/index.html",
"notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。"
},
{
"name": "CISA KEV",
"url": "https://github.com/cisagov/kev-data",
"notice": "Known Exploited Vulnerabilities catalog, CISA. CC0."
}
],
"records": [
{
"id": "CVE-2026-45659",
"aliases": [],
"title": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition：コード実行",
"summary": "Microsoft SharePoint のリモートコード実行脆弱性です。Microsoft Office SharePoint において、信頼できないデータの逆シリアライズが可能で、認可された攻撃者がネットワーク越しにコードを実行できる。",
"risk": "攻撃者がサーバー上でコードを実行できる可能性がある。",
"product": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition",
"category": "windows",
"component": "package",
"severity": "high",
"cvss": 8.8,
"cvssVersion": "3.1",
"cvssSource": "microsoft",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"affected": [
{
"product": "Microsoft SharePoint Enterprise Server 2016",
"range": ">= 16.0.0 / < 16.0.5552.1002（環境: x64-based Systems）"
},
{
"product": "Microsoft SharePoint Server 2019",
"range": ">= 16.0.0 / < 16.0.10417.20128（環境: x64-based Systems）"
},
{
"product": "Microsoft SharePoint Server Subscription Edition",
"range": ">= 16.0.0 / < 16.0.19725.20280（環境: x64-based Systems）"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"label": "CVE：microsoft"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45659",
"label": "CVE公式レコード"
},
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45659",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-05-22T22:04:33.517Z",
"modifiedAt": "2026-08-11T03:55:31.769Z",
"fetchedAt": "2026-10-23T02:43:49.047Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "",
"sourceTitle": "Microsoft SharePoint Remote Code Execution Vulnerability",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "Microsoft",
"product": "Microsoft SharePoint Enterprise Server 2016",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "16.0.0",
"lessThan": "16.0.5552.1002",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft SharePoint Server 2019",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "16.0.0",
"lessThan": "16.0.10417.20128",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft SharePoint Server Subscription Edition",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "16.0.0",
"lessThan": "16.0.19725.20280",
"versionType": "custom",
"status": "affected"
}
]
}
],
"configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-45659",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"fetchedAt": "2026-10-23T02:43:49.047Z",
"publishedAt": "2026-05-22T22:04:33.517Z",
"modifiedAt": "2026-08-11T03:55:31.769Z",
"state": "published",
"provider": "microsoft",
"title": "Microsoft SharePoint Remote Code Execution Vulnerability",
"descriptions": [
{
"lang": "en-US",
"value": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Microsoft",
"product": "Microsoft SharePoint Enterprise Server 2016",
"sourcePath": "/containers/cna/affected/0",
"platforms": [
"x64-based Systems"
],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "16.0.0",
"lessThan": "16.0.5552.1002",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft SharePoint Server 2019",
"sourcePath": "/containers/cna/affected/1",
"platforms": [
"x64-based Systems"
],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/1/versions/0",
"version": "16.0.0",
"lessThan": "16.0.10417.20128",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft SharePoint Server Subscription Edition",
"sourcePath": "/containers/cna/affected/2",
"platforms": [
"x64-based Systems"
],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/2/versions/0",
"version": "16.0.0",
"lessThan": "16.0.19725.20280",
"versionType": "custom",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-502",
"lang": "en-US",
"description": "CWE-502: Deserialization of Untrusted Data",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"provider": "microsoft",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659",
"label": "Microsoft SharePoint Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"provider": "microsoft",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45659",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5552.1002\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10417.20128\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourcePath": "/containers/cna/affected/2",
"text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.19725.20280\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"description\":\"CWE-502: Deserialization of Untrusted Data\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-502\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-08-11T03:55:31.769Z",
"fetchedAt": "2026-10-23T02:43:49.047Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-07-01T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Editionにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:14.717Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "b5e9bd0654a130102de9bd52ec5723bd70be191e70c272c71f3603c6bfd163a1",
"sourceModifiedAt": "2026-08-11T03:55:31.769Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Microsoft SharePoint のリモートコード実行脆弱性です。Microsoft Office SharePoint において、信頼できないデータの逆シリアライズが可能で、認可された攻撃者がネットワーク越しにコードを実行できる。",
"risk": "攻撃者がサーバー上でコードを実行できる可能性がある。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E2"
],
"applicability": [
{
"text": "Microsoft SharePoint Enterprise Server 2016 の x64 ベースシステムで、バージョン 16.0.0 以上 16.0.5552.1002 未満は影響を受ける。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E3",
"E1"
]
},
{
"text": "Microsoft SharePoint Server 2019 の x64 ベースシステムで、バージョン 16.0.0 以上 16.0.10417.20128 未満は影響を受ける。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E4",
"E1"
]
},
{
"text": "Microsoft SharePoint Server Subscription Edition の x64 ベースシステムで、バージョン 16.0.0 以上 16.0.19725.20280 未満は影響を受ける。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E5",
"E1"
]
},
{
"text": "公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5552.1002未満。対象の環境：x64-based Systems",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10417.20128未満。対象の環境：x64-based Systems",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.19725.20280未満。対象の環境：x64-based Systems",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E5"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659"
],
"evidenceIds": [
"E6"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-45659",
"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-45659"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-45659",
"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-45659"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-45659",
"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-45659"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"label": "CVE：microsoft"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45659",
"label": "CVE公式レコード"
},
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45659",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourceField": "/containers/cna/title",
"excerpt": "Microsoft SharePoint Remote Code Execution Vulnerability",
"language": null
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
"language": "en-US",
"representation": "source_excerpt"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5552.1002\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourceField": "/containers/cna/affected/1",
"excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10417.20128\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45659.json",
"sourceField": "/containers/cna/affected/2",
"excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.19725.20280\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E6",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45659",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-45659\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-45659（Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft SharePoint Enterprise Server 2016 の x64 ベースシステムで、バージョン 16.0.0 以上 16.0.5552.1002 未満は影響を受ける。\n・Microsoft SharePoint Server 2019 の x64 ベースシステムで、バージョン 16.0.0 以上 16.0.10417.20128 未満は影響を受ける。\n・Microsoft SharePoint Server Subscription Edition の x64 ベースシステムで、バージョン 16.0.0 以上 16.0.19725.20280 未満は影響を受ける。\n・公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5552.1002未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10417.20128未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.19725.20280未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-45659",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:14.717Z",
"lastSuccess": "2026-10-23T03:23:14.717Z",
"sourceCheckedAt": "2026-10-23T02:43:49.047Z",
"errorCode": null
},
"glossary": [
{
"term": "任意のコード実行",
"meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
"sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
"kind": "general_definition"
}
]
}
},
{
"id": "CVE-2026-48558",
"aliases": [],
"title": "SimpleHelp：認証の回避",
"summary": "SimpleHelp バージョン 5.5.15 以前および 6.0 のプレリリース版では、OIDC 認証フローにおいて送信された ID トークンの暗号署名が検証されないため、認証バイパスが可能です。OIDC 認証が設定されている環境では、リモートの未認証攻撃者が任意のクレームを含む偽造トークンを送信するだけで、完全に認証された技術者セッションを取得できます。一部の構成では多要素認証の回避も可能で、ユーザーの操作は不要です。",
"risk": "攻撃者が完全に認証された技術者セッションを取得でき、場合によっては多要素認証も回避できる可能性があります。",
"product": "SimpleHelp",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 9.5,
"cvssVersion": "4.0",
"cvssSource": "VulnCheck",
"cvssVector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"affected": [
{
"product": "SimpleHelp",
"range": ">= 5.5.0 / < 5.5.16"
},
{
"product": "SimpleHelp",
"range": ">= 6.0 / < 6.0 RC2"
},
{
"product": "SimpleHelp",
"range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"label": "CVE：VulnCheck"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48558",
"label": "CVE公式レコード"
},
{
"url": "https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/",
"label": "CVE掲載の参考情報"
},
{
"url": "https://simple-help.com/security/simplehelp-security-update-2026-05",
"label": "CISAが示す関連情報"
},
{
"url": "https://simple-help.com/release-news",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48558",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-12T17:07:05.453Z",
"modifiedAt": "2026-10-07T19:26:16.974Z",
"fetchedAt": "2026-10-23T02:43:49.168Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication. No user interaction is required.",
"sourceTitle": "SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"defaultStatus": "affected",
"vendor": "SimpleHelp",
"product": "SimpleHelp",
"versions": [
{
"status": "affected",
"version": "5.5.0",
"versionType": "semver",
"lessThan": "5.5.16"
},
{
"status": "affected",
"version": "6.0",
"versionType": "custom",
"lessThan": "6.0 RC2"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-48558",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"fetchedAt": "2026-10-23T02:43:49.168Z",
"publishedAt": "2026-06-12T17:07:05.453Z",
"modifiedAt": "2026-10-07T19:26:16.974Z",
"state": "published",
"provider": "VulnCheck",
"title": "SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification",
"descriptions": [
{
"lang": "en",
"value": "SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication. No user interaction is required.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "SimpleHelp",
"product": "SimpleHelp",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "affected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "5.5.0",
"lessThan": "5.5.16",
"versionType": "semver",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "6.0",
"lessThan": "6.0 RC2",
"versionType": "custom",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-347",
"lang": "en",
"description": "Improper Verification of Cryptographic Signature",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"baseScore": 9.5,
"baseSeverity": "CRITICAL",
"provider": "VulnCheck",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0"
},
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"provider": "VulnCheck",
"sourcePath": "/containers/cna/metrics/1/cvssV3_1"
}
],
"references": [
{
"url": "https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/",
"label": "VulnCheck",
"tags": [
"technical-description",
"exploit"
],
"provider": "VulnCheck",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://simple-help.com/security/simplehelp-security-update-2026-05",
"label": "VulnCheck",
"tags": [
"vendor-advisory"
],
"provider": "VulnCheck",
"sourcePath": "/containers/cna/references/1"
},
{
"url": "https://simple-help.com/release-news",
"label": "VulnCheck",
"tags": [
"release-notes"
],
"provider": "VulnCheck",
"sourcePath": "/containers/cna/references/2"
},
{
"url": "https://blackpointcyber.com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/",
"label": "CISA-ADP",
"tags": [
"third-party-advisory"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48558",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"defaultStatus\":\"affected\",\"vendor\":\"SimpleHelp\",\"product\":\"SimpleHelp\",\"versions\":[{\"status\":\"affected\",\"version\":\"5.5.0\",\"versionType\":\"semver\",\"lessThan\":\"5.5.16\"},{\"status\":\"affected\",\"version\":\"6.0\",\"versionType\":\"custom\",\"lessThan\":\"6.0 RC2\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication. No user interaction is required.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"cweId\":\"CWE-347\",\"description\":\"Improper Verification of Cryptographic Signature\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV4_0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0",
"text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.5,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/1/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourcePath": "/containers/cna/metrics/1/cvssV3_1",
"text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"version\":\"3.1\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":10,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-10-07T19:26:16.974Z",
"fetchedAt": "2026-10-23T02:43:49.168Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-29T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "SimpleHelpに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:16.228Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "6e5997c1648c82540132e306ae454d196e66697c7ed0e7ba74a4f577203adbbe",
"sourceModifiedAt": "2026-10-07T19:26:16.974Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "SimpleHelp バージョン 5.5.15 以前および 6.0 のプレリリース版では、OIDC 認証フローにおいて送信された ID トークンの暗号署名が検証されないため、認証バイパスが可能です。OIDC 認証が設定されている環境では、リモートの未認証攻撃者が任意のクレームを含む偽造トークンを送信するだけで、完全に認証された技術者セッションを取得できます。一部の構成では多要素認証の回避も可能で、ユーザーの操作は不要です。",
"risk": "攻撃者が完全に認証された技術者セッションを取得でき、場合によっては多要素認証も回避できる可能性があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "SimpleHelp バージョン 5.5.0 以上 5.5.16 未満 が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "SimpleHelp バージョン 6.0 以上 6.0 RC2 未満 が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "OIDC 認証が設定されている場合に脆弱性が有効になります。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "公式の対象表：SimpleHelp / SimpleHelp。影響ありとして記載：5.5.0以上、5.5.16未満。影響ありとして記載：6.0以上、6.0 RC2未満。個別に例外が記されていない版も、原資料では影響ありとされています。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「SimpleHelp」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-48558",
"https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/",
"https://simple-help.com/security/simplehelp-security-update-2026-05",
"https://simple-help.com/release-news",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48558"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-48558",
"https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/",
"https://simple-help.com/security/simplehelp-security-update-2026-05",
"https://simple-help.com/release-news",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48558"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-48558",
"https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/",
"https://simple-help.com/security/simplehelp-security-update-2026-05",
"https://simple-help.com/release-news",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48558"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"label": "CVE：VulnCheck"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48558",
"label": "CVE公式レコード"
},
{
"url": "https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/",
"label": "CVE掲載の参考情報"
},
{
"url": "https://simple-help.com/security/simplehelp-security-update-2026-05",
"label": "CISAが示す関連情報"
},
{
"url": "https://simple-help.com/release-news",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48558",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication. No user interaction is required.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourceField": "/containers/cna/title",
"excerpt": "SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48558.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"defaultStatus\":\"affected\",\"vendor\":\"SimpleHelp\",\"product\":\"SimpleHelp\",\"versions\":[{\"status\":\"affected\",\"version\":\"5.5.0\",\"versionType\":\"semver\",\"lessThan\":\"5.5.16\"},{\"status\":\"affected\",\"version\":\"6.0\",\"versionType\":\"custom\",\"lessThan\":\"6.0 RC2\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48558",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-48558\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-48558（SimpleHelp）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・SimpleHelp バージョン 5.5.0 以上 5.5.16 未満 が影響を受けます。\n・SimpleHelp バージョン 6.0 以上 6.0 RC2 未満 が影響を受けます。\n・OIDC 認証が設定されている場合に脆弱性が有効になります。\n・公式の対象表：SimpleHelp / SimpleHelp。影響ありとして記載：5.5.0以上、5.5.16未満。影響ありとして記載：6.0以上、6.0 RC2未満。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-48558",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:16.228Z",
"lastSuccess": "2026-10-23T03:23:16.228Z",
"sourceCheckedAt": "2026-10-23T02:43:49.168Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-12569",
"aliases": [],
"title": "Windchill PDMLink / FlexPLM：コード実行",
"summary": "PTC Windchill PDMlink および FlexPLM において、信頼できないデータのデシリアライズに起因する深刻なリモートコード実行（RCE）脆弱性が報告されています。この脆弱性はすべての CPS バージョンにも適用され、Windchill と FlexPLM の 11.0 M030 より前のリリースに影響します。",
"risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
"product": "Windchill PDMLink / FlexPLM",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 9.3,
"cvssVersion": "4.0",
"cvssSource": "PTC",
"cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/U:Red",
"affected": [
{
"product": "Windchill PDMLink",
"range": "<= 11.0 M030"
},
{
"product": "Windchill PDMLink",
"range": "11.1 M020"
},
{
"product": "Windchill PDMLink",
"range": "11.2.1.0"
},
{
"product": "Windchill PDMLink",
"range": "12.0.2.0"
},
{
"product": "Windchill PDMLink",
"range": "12.1.2.0"
},
{
"product": "Windchill PDMLink",
"range": "13.0.2.0"
},
{
"product": "Windchill PDMLink",
"range": "13.1.0.0"
},
{
"product": "Windchill PDMLink",
"range": "13.1.1.0"
},
{
"product": "Windchill PDMLink",
"range": "13.1.2.0"
},
{
"product": "Windchill PDMLink",
"range": "13.1.3.0"
},
{
"product": "FlexPLM",
"range": "<= 11.0 M030"
},
{
"product": "FlexPLM",
"range": "11.1 M020"
},
{
"product": "FlexPLM",
"range": "11.2.1.0"
},
{
"product": "FlexPLM",
"range": "12.0.0.0"
},
{
"product": "FlexPLM",
"range": "12.0.2.0"
},
{
"product": "FlexPLM",
"range": "12.1.2.0"
},
{
"product": "FlexPLM",
"range": "12.1.3.0"
},
{
"product": "FlexPLM",
"range": "13.0.2.0"
},
{
"product": "FlexPLM",
"range": "13.0.3.0"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"label": "CVE：PTC"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12569",
"label": "CVE公式レコード"
},
{
"url": "https://www.ptc.com/en/support/article/CS473270",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12569",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-18T00:11:35.241Z",
"modifiedAt": "2026-08-01T03:55:29.806Z",
"fetchedAt": "2026-10-23T02:43:45.930Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions\n * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030",
"sourceTitle": "Remote Code Execution (RCE) vulnerability in Windchill PDMlink",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "PTC",
"product": "Windchill PDMLink",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "11.0 M030",
"versionType": "semver"
},
{
"status": "affected",
"version": "11.1 M020"
},
{
"status": "affected",
"version": "11.2.1.0"
},
{
"status": "affected",
"version": "12.0.2.0"
},
{
"status": "affected",
"version": "12.1.2.0"
},
{
"status": "affected",
"version": "13.0.2.0"
},
{
"status": "affected",
"version": "13.1.0.0"
},
{
"status": "affected",
"version": "13.1.1.0"
},
{
"status": "affected",
"version": "13.1.2.0"
},
{
"status": "affected",
"version": "13.1.3.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTC",
"product": "FlexPLM",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "11.0 M030",
"versionType": "semver"
},
{
"status": "affected",
"version": "11.1 M020"
},
{
"status": "affected",
"version": "11.2.1.0"
},
{
"status": "affected",
"version": "12.0.0.0"
},
{
"status": "affected",
"version": "12.0.2.0"
},
{
"status": "affected",
"version": "12.1.2.0"
},
{
"status": "affected",
"version": "12.1.3.0"
},
{
"status": "affected",
"version": "13.0.2.0"
},
{
"status": "affected",
"version": "13.0.3.0"
}
],
"defaultStatus": "unaffected"
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-12569",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"fetchedAt": "2026-10-23T02:43:45.930Z",
"publishedAt": "2026-06-18T00:11:35.241Z",
"modifiedAt": "2026-08-01T03:55:29.806Z",
"state": "published",
"provider": "PTC",
"title": "Remote Code Execution (RCE) vulnerability in Windchill PDMlink",
"descriptions": [
{
"lang": "en",
"value": "A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions\n * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "PTC",
"product": "Windchill PDMLink",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "0",
"lessThanOrEqual": "11.0 M030",
"versionType": "semver",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "11.1 M020",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/2",
"version": "11.2.1.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/3",
"version": "12.0.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/4",
"version": "12.1.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/5",
"version": "13.0.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/6",
"version": "13.1.0.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/7",
"version": "13.1.1.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/8",
"version": "13.1.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/9",
"version": "13.1.3.0",
"status": "affected"
}
]
},
{
"vendor": "PTC",
"product": "FlexPLM",
"sourcePath": "/containers/cna/affected/1",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/1/versions/0",
"version": "0",
"lessThanOrEqual": "11.0 M030",
"versionType": "semver",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/1",
"version": "11.1 M020",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/2",
"version": "11.2.1.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/3",
"version": "12.0.0.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/4",
"version": "12.0.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/5",
"version": "12.1.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/6",
"version": "12.1.3.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/7",
"version": "13.0.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/8",
"version": "13.0.3.0",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-20",
"lang": "en",
"description": "CWE-20 Improper input validation",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
},
{
"cweId": "CWE-502",
"lang": "en",
"description": "CWE-502 Deserialization of untrusted data",
"sourcePath": "/containers/cna/problemTypes/1/descriptions/0"
}
],
"metrics": [
{
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/U:Red",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"provider": "PTC",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0"
}
],
"references": [
{
"url": "https://www.ptc.com/en/support/article/CS473270",
"label": "PTC",
"tags": [
"vendor-advisory",
"mitigation",
"permissions-required"
],
"provider": "PTC",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-12569",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"PTC\",\"product\":\"Windchill PDMLink\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"11.0 M030\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.1 M020\"},{\"status\":\"affected\",\"version\":\"11.2.1.0\"},{\"status\":\"affected\",\"version\":\"12.0.2.0\"},{\"status\":\"affected\",\"version\":\"12.1.2.0\"},{\"status\":\"affected\",\"version\":\"13.0.2.0\"},{\"status\":\"affected\",\"version\":\"13.1.0.0\"},{\"status\":\"affected\",\"version\":\"13.1.1.0\"},{\"status\":\"affected\",\"version\":\"13.1.2.0\"},{\"status\":\"affected\",\"version\":\"13.1.3.0\"}],\"defaultStatus\":\"unaffected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"vendor\":\"PTC\",\"product\":\"FlexPLM\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"11.0 M030\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.1 M020\"},{\"status\":\"affected\",\"version\":\"11.2.1.0\"},{\"status\":\"affected\",\"version\":\"12.0.0.0\"},{\"status\":\"affected\",\"version\":\"12.0.2.0\"},{\"status\":\"affected\",\"version\":\"12.1.2.0\"},{\"status\":\"affected\",\"version\":\"12.1.3.0\"},{\"status\":\"affected\",\"version\":\"13.0.2.0\"},{\"status\":\"affected\",\"version\":\"13.0.3.0\"}],\"defaultStatus\":\"unaffected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions\n * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper input validation\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourcePath": "/containers/cna/problemTypes/1/descriptions/0",
"text": "{\"lang\":\"en\",\"cweId\":\"CWE-502\",\"description\":\"CWE-502 Deserialization of untrusted data\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV4_0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0",
"text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"LOW\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"YES\",\"Recovery\":\"USER\",\"valueDensity\":\"CONCENTRATED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"RED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.3,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/U:Red\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-08-01T03:55:29.806Z",
"fetchedAt": "2026-10-23T02:43:45.930Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-25T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "Windchill PDMLink / FlexPLMにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:17.174Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "62bff27dc797b6d286e4110fbbffb38e3d92e0cf10539e5026fb97e3ce3aecf6",
"sourceModifiedAt": "2026-08-01T03:55:29.806Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "PTC Windchill PDMlink および FlexPLM において、信頼できないデータのデシリアライズに起因する深刻なリモートコード実行（RCE）脆弱性が報告されています。この脆弱性はすべての CPS バージョンにも適用され、Windchill と FlexPLM の 11.0 M030 より前のリリースに影響します。",
"risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "Windchill PDMLink の 11.0 M030 以前のすべてのバージョンが影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "Windchill PDMLink の 11.1 M020、11.2.1.0、12.0.2.0、12.1.2.0、13.0.2.0、13.1.0.0、13.1.1.0、13.1.2.0、13.1.3.0 が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "FlexPLM の 11.0 M030 以前のすべてのバージョンが影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E4",
"E2"
]
},
{
"text": "FlexPLM の 11.1 M020、11.2.1.0、12.0.0.0、12.0.2.0、12.1.2.0、12.1.3.0、13.0.2.0、13.0.3.0 が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E4",
"E2"
]
},
{
"text": "公式の対象表：PTC / Windchill PDMLink。影響ありとして記載：11.0 M030以下の版。影響ありとして記載：11.1 M020。影響ありとして記載：11.2.1.0。影響ありとして記載：12.0.2.0。影響ありとして記載：12.1.2.0。影響ありとして記載：13.0.2.0。影響ありとして記載：13.1.0.0。影響ありとして記載：13.1.1.0。影響ありとして記載：13.1.2.0。影響ありとして記載：13.1.3.0。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：PTC / FlexPLM。影響ありとして記載：11.0 M030以下の版。影響ありとして記載：11.1 M020。影響ありとして記載：11.2.1.0。影響ありとして記載：12.0.0.0。影響ありとして記載：12.0.2.0。影響ありとして記載：12.1.2.0。影響ありとして記載：12.1.3.0。影響ありとして記載：13.0.2.0。影響ありとして記載：13.0.3.0。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569"
],
"evidenceIds": [
"E5"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Windchill PDMLink / FlexPLM」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-12569",
"https://www.ptc.com/en/support/article/CS473270",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-12569"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-12569",
"https://www.ptc.com/en/support/article/CS473270",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-12569"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-12569",
"https://www.ptc.com/en/support/article/CS473270",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-12569"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"label": "CVE：PTC"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12569",
"label": "CVE公式レコード"
},
{
"url": "https://www.ptc.com/en/support/article/CS473270",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12569",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions\n * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourceField": "/containers/cna/title",
"excerpt": "Remote Code Execution (RCE) vulnerability in Windchill PDMlink",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"PTC\",\"product\":\"Windchill PDMLink\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"11.0 M030\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.1 M020\"},{\"status\":\"affected\",\"version\":\"11.2.1.0\"},{\"status\":\"affected\",\"version\":\"12.0.2.0\"},{\"status\":\"affected\",\"version\":\"12.1.2.0\"},{\"status\":\"affected\",\"version\":\"13.0.2.0\"},{\"status\":\"affected\",\"version\":\"13.1.0.0\"},{\"status\":\"affected\",\"version\":\"13.1.1.0\"},{\"status\":\"affected\",\"version\":\"13.1.2.0\"},{\"status\":\"affected\",\"version\":\"13.1.3.0\"}],\"defaultStatus\":\"unaffected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12569.json",
"sourceField": "/containers/cna/affected/1",
"excerpt": "{\"vendor\":\"PTC\",\"product\":\"FlexPLM\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"11.0 M030\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.1 M020\"},{\"status\":\"affected\",\"version\":\"11.2.1.0\"},{\"status\":\"affected\",\"version\":\"12.0.0.0\"},{\"status\":\"affected\",\"version\":\"12.0.2.0\"},{\"status\":\"affected\",\"version\":\"12.1.2.0\"},{\"status\":\"affected\",\"version\":\"12.1.3.0\"},{\"status\":\"affected\",\"version\":\"13.0.2.0\"},{\"status\":\"affected\",\"version\":\"13.0.3.0\"}],\"defaultStatus\":\"unaffected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E5",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-12569",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-12569\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-12569（Windchill PDMLink / FlexPLM）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windchill PDMLink の 11.0 M030 以前のすべてのバージョンが影響を受けます。\n・Windchill PDMLink の 11.1 M020、11.2.1.0、12.0.2.0、12.1.2.0、13.0.2.0、13.1.0.0、13.1.1.0、13.1.2.0、13.1.3.0 が影響を受けます。\n・FlexPLM の 11.0 M030 以前のすべてのバージョンが影響を受けます。\n・FlexPLM の 11.1 M020、11.2.1.0、12.0.0.0、12.0.2.0、12.1.2.0、12.1.3.0、13.0.2.0、13.0.3.0 が影響を受けます。\n・公式の対象表：PTC / Windchill PDMLink。影響ありとして記載：11.0 M030以下の版。影響ありとして記載：11.1 M020。影響ありとして記載：11.2.1.0。影響ありとして記載：12.0.2.0。影響ありとして記載：12.1.2.0。影響ありとして記載：13.0.2.0。影響ありとして記載：13.1.0.0。影響ありとして記載：13.1.1.0。影響ありとして記載：13.1.2.0。影響ありとして記載：13.1.3.0。\n・公式の対象表：PTC / FlexPLM。影響ありとして記載：11.0 M030以下の版。影響ありとして記載：11.1 M020。影響ありとして記載：11.2.1.0。影響ありとして記載：12.0.0.0。影響ありとして記載：12.0.2.0。影響ありとして記載：12.1.2.0。影響ありとして記載：12.1.3.0。影響ありとして記載：13.0.2.0。影響ありとして記載：13.0.3.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-12569",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:17.174Z",
"lastSuccess": "2026-10-23T03:23:17.174Z",
"sourceCheckedAt": "2026-10-23T02:43:45.930Z",
"errorCode": null
},
"glossary": [
{
"term": "任意のコード実行",
"meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
"sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
"kind": "general_definition"
}
]
}
},
{
"id": "CVE-2026-20230",
"aliases": [],
"title": "Cisco Unified Communications Manager：脆弱性情報",
"summary": "Cisco Unified Communications Manager と Cisco Unified Communications Manager Session Management Edition において、入力検証の不備によりサーバーサイドリクエストフォージェリ（SSRF）攻撃が可能になる脆弱性が存在します。認証されていないリモート攻撃者が細工した HTTP リクエストを送信すると、デバイス上でファイルを書き込むことができ、後に root 権限へ昇格する可能性があります。Cisco はこの脆弱性の影響度を Critical と評価しています。なお、攻撃を実行するには WebDialer サービスが有効である必要があり、デフォルトでは無効になっています。",
"risk": "攻撃者がファイルを書き込み、後に root 権限に昇格できる可能性がある。",
"product": "Cisco Unified Communications Manager",
"category": "other",
"component": "package",
"severity": "high",
"cvss": 8.6,
"cvssVersion": "3.1",
"cvssSource": "cisco",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"affected": [
{
"product": "Cisco Unified Communications Manager",
"range": "14"
},
{
"product": "Cisco Unified Communications Manager",
"range": "14SU1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "14SU2"
},
{
"product": "Cisco Unified Communications Manager",
"range": "14SU3"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15SU1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "14SU4"
},
{
"product": "Cisco Unified Communications Manager",
"range": "14SU4a"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15SU1a"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15SU2"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13010-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13011-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13012-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13013-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13014-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13015-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13016-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15.0.1.13017-1"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15SU3a"
},
{
"product": "Cisco Unified Communications Manager",
"range": "14SU5"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15SU4"
},
{
"product": "Cisco Unified Communications Manager",
"range": "15SU4a"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20230",
"label": "CVE公式レコード"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW",
"label": "cisco-sa-cucm-ssrf-cXPnHcW"
},
{
"url": "https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20230",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-03T16:09:45.961Z",
"modifiedAt": "2026-10-07T18:09:00.866Z",
"fetchedAt": "2026-10-23T02:43:47.386Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.\r\nNote: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.\r\nNote: To exploit this vulnerability, the WebDialer service must be enabled. WebDialer is disabled by default.",
"sourceTitle": "Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "Cisco",
"product": "Cisco Unified Communications Manager",
"versions": [
{
"version": "14",
"status": "affected"
},
{
"version": "14SU1",
"status": "affected"
},
{
"version": "14SU2",
"status": "affected"
},
{
"version": "14SU3",
"status": "affected"
},
{
"version": "15",
"status": "affected"
},
{
"version": "15SU1",
"status": "affected"
},
{
"version": "14SU4",
"status": "affected"
},
{
"version": "14SU4a",
"status": "affected"
},
{
"version": "15SU1a",
"status": "affected"
},
{
"version": "15SU2",
"status": "affected"
},
{
"version": "15.0.1.13010-1",
"status": "affected"
},
{
"version": "15.0.1.13011-1",
"status": "affected"
},
{
"version": "15.0.1.13012-1",
"status": "affected"
},
{
"version": "15.0.1.13013-1",
"status": "affected"
},
{
"version": "15.0.1.13014-1",
"status": "affected"
},
{
"version": "15.0.1.13015-1",
"status": "affected"
},
{
"version": "15.0.1.13016-1",
"status": "affected"
},
{
"version": "15.0.1.13017-1",
"status": "affected"
},
{
"version": "15SU3a",
"status": "affected"
},
{
"version": "14SU5",
"status": "affected"
},
{
"version": "15SU4",
"status": "affected"
},
{
"version": "15SU4a",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-20230",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"fetchedAt": "2026-10-23T02:43:47.386Z",
"publishedAt": "2026-06-03T16:09:45.961Z",
"modifiedAt": "2026-10-07T18:09:00.866Z",
"state": "published",
"provider": "cisco",
"title": "Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.\r\nNote: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.\r\nNote: To exploit this vulnerability, the WebDialer service must be enabled. WebDialer is disabled by default.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Cisco",
"product": "Cisco Unified Communications Manager",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unknown",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "14",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "14SU1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/2",
"version": "14SU2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/3",
"version": "14SU3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/4",
"version": "15",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/5",
"version": "15SU1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/6",
"version": "14SU4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/7",
"version": "14SU4a",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/8",
"version": "15SU1a",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/9",
"version": "15SU2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/10",
"version": "15.0.1.13010-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/11",
"version": "15.0.1.13011-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/12",
"version": "15.0.1.13012-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/13",
"version": "15.0.1.13013-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/14",
"version": "15.0.1.13014-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/15",
"version": "15.0.1.13015-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/16",
"version": "15.0.1.13016-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/17",
"version": "15.0.1.13017-1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/18",
"version": "15SU3a",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/19",
"version": "14SU5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/20",
"version": "15SU4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/21",
"version": "15SU4a",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerability that is described in this advisory.\r\n\r\nIn June 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.",
"sourcePath": "/containers/cna/exploits/0/value"
}
],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-918",
"lang": "en",
"description": "Server-Side Request Forgery (SSRF)",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"provider": "cisco",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW",
"label": "cisco-sa-cucm-ssrf-cXPnHcW",
"tags": [],
"provider": "cisco",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://denizhalil.com/2026/06/12/cve-2026-20230-cisco-unified-cm-ssrf/",
"label": "CISA-ADP",
"tags": [
"exploit"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20230",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Unified Communications Manager\",\"versions\":[{\"version\":\"14\",\"status\":\"affected\"},{\"version\":\"14SU1\",\"status\":\"affected\"},{\"version\":\"14SU2\",\"status\":\"affected\"},{\"version\":\"14SU3\",\"status\":\"affected\"},{\"version\":\"15\",\"status\":\"affected\"},{\"version\":\"15SU1\",\"status\":\"affected\"},{\"version\":\"14SU4\",\"status\":\"affected\"},{\"version\":\"14SU4a\",\"status\":\"affected\"},{\"version\":\"15SU1a\",\"status\":\"affected\"},{\"version\":\"15SU2\",\"status\":\"affected\"},{\"version\":\"15.0.1.13010-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13011-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13012-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13013-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13014-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13015-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13016-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13017-1\",\"status\":\"affected\"},{\"version\":\"15SU3a\",\"status\":\"affected\"},{\"version\":\"14SU5\",\"status\":\"affected\"},{\"version\":\"15SU4\",\"status\":\"affected\"},{\"version\":\"15SU4a\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.\r\nNote: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.\r\nNote: To exploit this vulnerability, the WebDialer service must be enabled. WebDialer is disabled by default.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/exploits/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourcePath": "/containers/cna/exploits/0/value",
"text": "The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerability that is described in this advisory.\r\n\r\nIn June 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"description\":\"Server-Side Request Forgery (SSRF)\",\"type\":\"cwe\",\"cweId\":\"CWE-918\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-10-07T18:09:00.866Z",
"fetchedAt": "2026-10-23T02:43:47.386Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-25T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "Cisco Unified Communications Managerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:17.680Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "13e97b2f5d5d7ffe1e8c7670f8332bd71577c84f246c9b1b9065fedbb59e34dd",
"sourceModifiedAt": "2026-10-07T18:09:00.866Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Cisco Unified Communications Manager と Cisco Unified Communications Manager Session Management Edition において、入力検証の不備によりサーバーサイドリクエストフォージェリ（SSRF）攻撃が可能になる脆弱性が存在します。認証されていないリモート攻撃者が細工した HTTP リクエストを送信すると、デバイス上でファイルを書き込むことができ、後に root 権限へ昇格する可能性があります。Cisco はこの脆弱性の影響度を Critical と評価しています。なお、攻撃を実行するには WebDialer サービスが有効である必要があり、デフォルトでは無効になっています。",
"risk": "攻撃者がファイルを書き込み、後に root 権限に昇格できる可能性がある。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E2"
],
"applicability": [
{
"text": "影響を受ける製品は Cisco Unified Communications Manager および Cisco Unified Communications Manager Session Management Edition です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E2",
"E1"
]
},
{
"text": "影響を受けるバージョンは 14、14SU1、14SU2、14SU3、15、15SU1、14SU4、14SU4a、15SU1a、15SU2、15.0.1.13010-1、15.0.1.13011-1、15.0.1.13012-1、15.0.1.13013-1、15.0.1.13014-1、15.0.1.13015-1、15.0.1.13016-1、15.0.1.13017-1、15SU3a、14SU5、15SU4、15SU4a です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E3",
"E1"
]
},
{
"text": "攻撃者は認証されていないリモートの攻撃者です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E2",
"E1"
]
},
{
"text": "攻撃を実行するには WebDialer サービスが有効になっている必要があります。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E2",
"E1"
]
},
{
"text": "特定の HTTP リクエストに対する入力検証が不適切です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E2",
"E1"
]
},
{
"text": "公式の対象表：Cisco / Cisco Unified Communications Manager。影響ありとして記載：14。影響ありとして記載：14SU1。影響ありとして記載：14SU2。影響ありとして記載：14SU3。影響ありとして記載：15。影響ありとして記載：15SU1。影響ありとして記載：14SU4。影響ありとして記載：14SU4a。影響ありとして記載：15SU1a。影響ありとして記載：15SU2。影響ありとして記載：15.0.1.13010-1。影響ありとして記載：15.0.1.13011-1。影響ありとして記載：15.0.1.13012-1。影響ありとして記載：15.0.1.13013-1。影響ありとして記載：15.0.1.13014-1。影響ありとして記載：15.0.1.13015-1。影響ありとして記載：15.0.1.13016-1。影響ありとして記載：15.0.1.13017-1。影響ありとして記載：15SU3a。影響ありとして記載：14SU5。影響ありとして記載：15SU4。影響ありとして記載：15SU4a。個別に記されていない版の影響は、原資料でも未確定です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Cisco Unified Communications Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20230",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230",
"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20230"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-20230",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230",
"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20230"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20230",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230",
"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20230"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20230",
"label": "CVE公式レコード"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW",
"label": "cisco-sa-cucm-ssrf-cXPnHcW"
},
{
"url": "https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20230",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourceField": "/containers/cna/title",
"excerpt": "Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability",
"language": null
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.\r\nNote: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.\r\nNote: To exploit this vulnerability, the WebDialer service must be enabled. WebDialer is disabled by default.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20230.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Unified Communications Manager\",\"versions\":[{\"version\":\"14\",\"status\":\"affected\"},{\"version\":\"14SU1\",\"status\":\"affected\"},{\"version\":\"14SU2\",\"status\":\"affected\"},{\"version\":\"14SU3\",\"status\":\"affected\"},{\"version\":\"15\",\"status\":\"affected\"},{\"version\":\"15SU1\",\"status\":\"affected\"},{\"version\":\"14SU4\",\"status\":\"affected\"},{\"version\":\"14SU4a\",\"status\":\"affected\"},{\"version\":\"15SU1a\",\"status\":\"affected\"},{\"version\":\"15SU2\",\"status\":\"affected\"},{\"version\":\"15.0.1.13010-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13011-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13012-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13013-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13014-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13015-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13016-1\",\"status\":\"affected\"},{\"version\":\"15.0.1.13017-1\",\"status\":\"affected\"},{\"version\":\"15SU3a\",\"status\":\"affected\"},{\"version\":\"14SU5\",\"status\":\"affected\"},{\"version\":\"15SU4\",\"status\":\"affected\"},{\"version\":\"15SU4a\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-20230\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-20230（Cisco Unified Communications Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受ける製品は Cisco Unified Communications Manager および Cisco Unified Communications Manager Session Management Edition です。\n・影響を受けるバージョンは 14、14SU1、14SU2、14SU3、15、15SU1、14SU4、14SU4a、15SU1a、15SU2、15.0.1.13010-1、15.0.1.13011-1、15.0.1.13012-1、15.0.1.13013-1、15.0.1.13014-1、15.0.1.13015-1、15.0.1.13016-1、15.0.1.13017-1、15SU3a、14SU5、15SU4、15SU4a です。\n・攻撃者は認証されていないリモートの攻撃者です。\n・攻撃を実行するには WebDialer サービスが有効になっている必要があります。\n・特定の HTTP リクエストに対する入力検証が不適切です。\n・公式の対象表：Cisco / Cisco Unified Communications Manager。影響ありとして記載：14。影響ありとして記載：14SU1。影響ありとして記載：14SU2。影響ありとして記載：14SU3。影響ありとして記載：15。影響ありとして記載：15SU1。影響ありとして記載：14SU4。影響ありとして記載：14SU4a。影響ありとして記載：15SU1a。影響ありとして記載：15SU2。影響ありとして記載：15.0.1.13010-1。影響ありとして記載：15.0.1.13011-1。影響ありとして記載：15.0.1.13012-1。影響ありとして記載：15.0.1.13013-1。影響ありとして記載：15.0.1.13014-1。影響ありとして記載：15.0.1.13015-1。影響ありとして記載：15.0.1.13016-1。影響ありとして記載：15.0.1.13017-1。影響ありとして記載：15SU3a。影響ありとして記載：14SU5。影響ありとして記載：15SU4。影響ありとして記載：15SU4a。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20230",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:17.680Z",
"lastSuccess": "2026-10-23T03:23:17.680Z",
"sourceCheckedAt": "2026-10-23T02:43:47.386Z",
"errorCode": null
},
"glossary": [
{
"term": "SSRF",
"meaning": "攻撃者が、サーバーに意図しない宛先へ通信を送らせる問題です。実際に送れる通信や影響の範囲は、それぞれの脆弱性の説明で確認します。",
"sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF",
"kind": "general_definition"
}
]
}
},
{
"id": "CVE-2025-67038",
"aliases": [],
"title": "EDS5000 series / G520 series / X300 series / E210 series / E220 series：コード実行",
"summary": "Lantronix EDS5000 2.1.0.0R3 の HTTP RPC モジュールは、認証に失敗した際にログを書き込むためシェルコマンドを実行しますが、ユーザー名がそのままコマンドに連結され、サニタイズが行われません。そのため、攻撃者は username パラメータに任意の OS コマンドを注入でき、ルート権限で実行されます。",
"risk": "攻撃者がルート権限で任意の OS コマンドを実行できる。",
"product": "EDS5000 series / G520 series / X300 series / E210 series / E220 series",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 9.8,
"cvssVersion": "3.1",
"cvssSource": "icscert",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"affected": [
{
"product": "EDS5000 series",
"range": "<= 2.1.0.0R3"
},
{
"product": "G520 series",
"range": "< 2.6.0.4R6"
},
{
"product": "X300 series",
"range": "< 2.6.0.4R6"
},
{
"product": "E210 series",
"range": "< 3.21.0.0R1"
},
{
"product": "E220 series",
"range": "< 3.21.0.0R1"
}
],
"fixed": [],
"steps": [
"EDS5000 系列はバージョン 2.2.0.0R1 以降にアップグレードしてください。",
"G520 系列はバージョン 2.6.0.4R6 以降にアップグレードしてください。",
"X300 系列はバージョン 2.6.0.4R6 以降にアップグレードしてください。",
"E210 系列はバージョン 3.21.0.0R1 以降にアップグレードしてください。",
"E220 系列はバージョン 3.21.0.0R1 以降にアップグレードしてください。",
"「CVE-2025-67038」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"label": "CVE：icscert"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-67038",
"label": "CVE公式レコード"
},
{
"url": "https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"label": "CVE掲載の参考情報"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67038",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-03-11T00:00:00.000Z",
"modifiedAt": "2026-09-08T15:30:01.877Z",
"fetchedAt": "2026-10-23T02:43:40.193Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.",
"sourceTitle": "Lantronix EDS5000, G520, and X300 OS Command Injection",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "Lantronix",
"product": "EDS5000 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "2.1.0.0R3",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.2.0.0R1"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "G520 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.6.0.4R6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.6.0.4R6"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "X300 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.6.0.4R6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.6.0.4R6"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "E210 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.21.0.0R1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.21.0.0R1"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "E220 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.21.0.0R1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.21.0.0R1"
}
],
"defaultStatus": "unaffected"
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2025-67038",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"fetchedAt": "2026-10-23T02:43:40.193Z",
"publishedAt": "2026-03-11T00:00:00.000Z",
"modifiedAt": "2026-09-08T15:30:01.877Z",
"state": "published",
"provider": "icscert",
"title": "Lantronix EDS5000, G520, and X300 OS Command Injection",
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Lantronix",
"product": "EDS5000 series",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "0",
"lessThanOrEqual": "2.1.0.0R3",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "2.2.0.0R1",
"status": "unaffected"
}
]
},
{
"vendor": "Lantronix",
"product": "G520 series",
"sourcePath": "/containers/cna/affected/1",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/1/versions/0",
"version": "0",
"lessThan": "2.6.0.4R6",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/1/versions/1",
"version": "2.6.0.4R6",
"status": "unaffected"
}
]
},
{
"vendor": "Lantronix",
"product": "X300 series",
"sourcePath": "/containers/cna/affected/2",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/2/versions/0",
"version": "0",
"lessThan": "2.6.0.4R6",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/2/versions/1",
"version": "2.6.0.4R6",
"status": "unaffected"
}
]
},
{
"vendor": "Lantronix",
"product": "E210 series",
"sourcePath": "/containers/cna/affected/3",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/3/versions/0",
"version": "0",
"lessThan": "3.21.0.0R1",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/3/versions/1",
"version": "3.21.0.0R1",
"status": "unaffected"
}
]
},
{
"vendor": "Lantronix",
"product": "E220 series",
"sourcePath": "/containers/cna/affected/4",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/4/versions/0",
"version": "0",
"lessThan": "3.21.0.0R1",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/4/versions/1",
"version": "3.21.0.0R1",
"status": "unaffected"
}
]
}
],
"solutions": [
{
"lang": "en",
"value": "Latronix has released the following updates addressing this vulnerability. For more information, see the Latronix Vulnerability Library ( https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw ).",
"sourcePath": "/containers/cna/solutions/0/value"
},
{
"lang": "en",
"value": "EDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"sourcePath": "/containers/cna/solutions/1/value"
},
{
"lang": "en",
"value": "G520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528",
"sourcePath": "/containers/cna/solutions/2/value"
},
{
"lang": "en",
"value": "X300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304",
"sourcePath": "/containers/cna/solutions/3/value"
},
{
"lang": "en",
"value": "E210 series: Upgrade to version 3.21.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1914404865/Latest+firmware+ePack+for+the+E210+Series+E213+E214+E215+E218+Cellular+Routers",
"sourcePath": "/containers/cna/solutions/4/value"
},
{
"lang": "en",
"value": "E220 series: Upgrade to version 3.21.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1914437633/Latest+firmware+ePack+for+the+E220+Series+E224+E225+E228+Cellular+Routers",
"sourcePath": "/containers/cna/solutions/5/value"
},
{
"lang": "en",
"value": "For more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n mailto:Support@lantronix.com",
"sourcePath": "/containers/cna/solutions/6/value"
}
],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-78",
"lang": "en",
"description": "CWE-78",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"provider": "icscert",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
},
{
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"provider": "icscert",
"sourcePath": "/containers/cna/metrics/1/cvssV4_0"
}
],
"references": [
{
"url": "https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"label": "icscert",
"tags": [],
"provider": "icscert",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"label": "icscert",
"tags": [],
"provider": "icscert",
"sourcePath": "/containers/cna/references/1"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"label": "icscert",
"tags": [],
"provider": "icscert",
"sourcePath": "/containers/cna/references/2"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-67038",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"Lantronix\",\"product\":\"EDS5000 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"2.1.0.0R3\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"2.2.0.0R1\"}],\"defaultStatus\":\"unaffected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"vendor\":\"Lantronix\",\"product\":\"G520 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"2.6.0.4R6\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"2.6.0.4R6\"}],\"defaultStatus\":\"unaffected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/affected/2",
"text": "{\"vendor\":\"Lantronix\",\"product\":\"X300 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"2.6.0.4R6\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"2.6.0.4R6\"}],\"defaultStatus\":\"unaffected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/affected/3",
"text": "{\"vendor\":\"Lantronix\",\"product\":\"E210 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"3.21.0.0R1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"3.21.0.0R1\"}],\"defaultStatus\":\"unaffected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/affected/4",
"text": "{\"vendor\":\"Lantronix\",\"product\":\"E220 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"3.21.0.0R1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"3.21.0.0R1\"}],\"defaultStatus\":\"unaffected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/solutions/0/value",
"text": "Latronix has released the following updates addressing this vulnerability. For more information, see the Latronix Vulnerability Library ( https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw ).",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/1/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/solutions/1/value",
"text": "EDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/2/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/solutions/2/value",
"text": "G520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/3/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/solutions/3/value",
"text": "X300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/4/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/solutions/4/value",
"text": "E210 series: Upgrade to version 3.21.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1914404865/Latest+firmware+ePack+for+the+E210+Series+E213+E214+E215+E218+Cellular+Routers",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/5/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/solutions/5/value",
"text": "E220 series: Upgrade to version 3.21.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1914437633/Latest+firmware+ePack+for+the+E220+Series+E224+E225+E228+Cellular+Routers",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/6/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/solutions/6/value",
"text": "For more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n mailto:Support@lantronix.com",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"cweId\":\"CWE-78\",\"description\":\"CWE-78\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/1/cvssV4_0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourcePath": "/containers/cna/metrics/1/cvssV4_0",
"text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.3,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"sourcePath": "article:summary-vulnerabilities-remediations",
"text": "Lantronix EDS3000PS and EDS5000 (Update B) | CISA\n\nSummary\n\nSuccessful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code with root-level privileges.\n\nThe following versions of Lantronix EDS3000PS and EDS5000 (Update B) are affected:\n\nEDS5000 series <=2.1.0.0R3 (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nEDS3000PS series <=3.1.0.0R2 (CVE-2025-67039, CVE-2025-70082, CVE-2025-67041)\n\nG520 series <2.6.0.4R6 (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nX300 series <2.6.0.4R6 (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nE210 series <3.21.0.0R1 (CVE-2025-67038)\n\nE220 series <3.21.0.0R1 (CVE-2025-67038)\n\nCVSS\nVendor\nEquipment\n\nv3 9.8\nLantronix\nEDS5000 series\n\n3 Vulnerabilities\n\nImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Authentication Bypass Using an Alternate Path or Channel, Unverified Password Change\n\nBackground\n\nCritical Infrastructure Sectors: Communications, Information Technology, Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: United States\n\nVulnerabilities\n\nExpand All +\n\nCVE-2025-67034\n\nAn issue was discovered in Lantronix X300, G520, and EDS5000 where an authenticated attacker can inject OS commands into the \"name\" parameter when deleting SSL credentials through the management interface. Injected commands are executed with root privileges.\n\nRead More\n\n3 Affected Products\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix G520 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nG520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix X300 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nX300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.2\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\n4.0\n8.6\nHIGH\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2025-67035\n\nAn issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys, users, and known hosts. Commands are executed with root privileges.\n\nRead More\n\n4 Affected Products\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix G520 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nLantronix X300 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.2\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\n4.0\n8.6\nHIGH\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2025-67036\n\nAn issue was discovered in Lantronix EDS5000, G520, and X300 where the Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name parameter, an authenticated attacker can inject arbitrary OS commands that are executed with root privileges.\n\nRead More\n\n7 Affected Products\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix G520 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nG520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix X300 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nX300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix G520 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nG520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix X300 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nX300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.2\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\n4.0\n8.6\nHIGH\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2025-67037\n\nAn issue was discovered in Lantronix EDS5000, G520, and X300 where an authenticated attacker can inject OS commands into the \"tunnel\" parameter when killing a tunnel connection. Injected commands are executed with root privileges.\n\nRead More\n\n10 Affected Products\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix G520 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nG520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix X300 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nX300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix G520 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nG520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix X300 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nX300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nEDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032. (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix G520 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nG520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nLantronix X300 series: <2.6.0.4R6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).\n\nVendor fix\nX300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304. (CVE-2025-67034, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)\n\nMitigation\nFor more information or technical assistance, contact Lantronix support (Support@lantronix.com).\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.2\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\n4.0\n8.6\nHIGH\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2025-67038\n\nAn issue was discovered in Lantronix EDS5000, G520, X300, E210, and E220 where the HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.\n\nRead More\n\n15 Affected Products\n\nLantronix EDS5000 series: <=2.1.0.0R3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosu",
"truncated": true,
"representation": "html_text_excerpt",
"relatedCve": "CVE-2025-67038",
"relatedCves": [
"CVE-2025-67034",
"CVE-2025-67035",
"CVE-2025-67036",
"CVE-2025-67037",
"CVE-2025-67038",
"CVE-2025-67039",
"CVE-2025-70082",
"CVE-2025-67041"
]
}
],
"limits": {
"completeness": "bounded",
"truncatedFields": [
"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02"
],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。",
"excludedLinkedSources": []
},
"supplementarySources": [
{
"sourceType": "CISA ICS",
"sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"title": "Lantronix EDS3000PS and EDS5000 (Update B) | CISA",
"relatedCves": [
"CVE-2025-67034",
"CVE-2025-67035",
"CVE-2025-67036",
"CVE-2025-67037",
"CVE-2025-67038",
"CVE-2025-67039",
"CVE-2025-70082",
"CVE-2025-67041"
]
}
],
"relatedDocuments": [
{
"type": "html",
"sourceType": "CISA ICS",
"sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"title": "Lantronix EDS3000PS and EDS5000 (Update B) | CISA",
"relatedCves": [
"CVE-2025-67034",
"CVE-2025-67035",
"CVE-2025-67036",
"CVE-2025-67037",
"CVE-2025-67038",
"CVE-2025-67039",
"CVE-2025-70082",
"CVE-2025-67041"
],
"truncated": true
}
]
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-09-08T15:30:01.877Z",
"fetchedAt": "2026-10-23T02:43:40.193Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-23T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "EDS5000 series / G520 series / X300 series / E210 series / E220 seriesにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:17.808Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "49cb628d703538fd7ce1fde2e073f64e9972c351ca364e9c613e52a18aa91357",
"sourceModifiedAt": "2026-09-08T15:30:01.877Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Lantronix EDS5000 2.1.0.0R3 の HTTP RPC モジュールは、認証に失敗した際にログを書き込むためシェルコマンドを実行しますが、ユーザー名がそのままコマンドに連結され、サニタイズが行われません。そのため、攻撃者は username パラメータに任意の OS コマンドを注入でき、ルート権限で実行されます。",
"risk": "攻撃者がルート権限で任意の OS コマンドを実行できる。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "EDS5000 系列はバージョン 2.1.0.0R3 以下が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "G520 系列はバージョン 2.6.0.4R6 未満が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E4",
"E2"
]
},
{
"text": "X300 系列はバージョン 2.6.0.4R6 未満が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E5",
"E2"
]
},
{
"text": "E210 系列はバージョン 3.21.0.0R1 未満が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E6",
"E2"
]
},
{
"text": "E220 系列はバージョン 3.21.0.0R1 未満が影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E7",
"E2"
]
},
{
"text": "公式の対象表：Lantronix / EDS5000 series。影響ありとして記載：2.1.0.0R3以下の版。影響なしとして記載：2.2.0.0R1。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：Lantronix / G520 series。影響ありとして記載：2.6.0.4R6未満の版。影響なしとして記載：2.6.0.4R6。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "公式の対象表：Lantronix / X300 series。影響ありとして記載：2.6.0.4R6未満の版。影響なしとして記載：2.6.0.4R6。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E5"
]
},
{
"text": "公式の対象表：Lantronix / E210 series。影響ありとして記載：3.21.0.0R1未満の版。影響なしとして記載：3.21.0.0R1。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E6"
]
},
{
"text": "公式の対象表：Lantronix / E220 series。影響ありとして記載：3.21.0.0R1未満の版。影響なしとして記載：3.21.0.0R1。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E7"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02"
],
"evidenceIds": [
"E13"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「EDS5000 series / G520 series / X300 series / E210 series / E220 series」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2025-67038",
"https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038",
"https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2025-67038"
]
}
],
"actions": [
{
"text": "EDS5000 系列はバージョン 2.2.0.0R1 以降にアップグレードしてください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E8"
]
},
{
"text": "G520 系列はバージョン 2.6.0.4R6 以降にアップグレードしてください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E9"
]
},
{
"text": "X300 系列はバージョン 2.6.0.4R6 以降にアップグレードしてください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E10"
]
},
{
"text": "E210 系列はバージョン 3.21.0.0R1 以降にアップグレードしてください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E11"
]
},
{
"text": "E220 系列はバージョン 3.21.0.0R1 以降にアップグレードしてください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E12"
]
},
{
"text": "「CVE-2025-67038」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2025-67038",
"https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038",
"https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2025-67038"
]
},
{
"text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2025-67038",
"https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038",
"https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2025-67038"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2025-67038",
"https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038",
"https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2025-67038"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2025-67038",
"https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038",
"https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2025-67038"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。",
"公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"label": "CVE：icscert"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-67038",
"label": "CVE公式レコード"
},
{
"url": "https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"label": "CVE掲載の参考情報"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-67038",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67038",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/title",
"excerpt": "Lantronix EDS5000, G520, and X300 OS Command Injection",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"Lantronix\",\"product\":\"EDS5000 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThanOrEqual\":\"2.1.0.0R3\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"2.2.0.0R1\"}],\"defaultStatus\":\"unaffected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/affected/1",
"excerpt": "{\"vendor\":\"Lantronix\",\"product\":\"G520 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"2.6.0.4R6\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"2.6.0.4R6\"}],\"defaultStatus\":\"unaffected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/affected/2",
"excerpt": "{\"vendor\":\"Lantronix\",\"product\":\"X300 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"2.6.0.4R6\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"2.6.0.4R6\"}],\"defaultStatus\":\"unaffected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E6",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/affected/3",
"excerpt": "{\"vendor\":\"Lantronix\",\"product\":\"E210 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"3.21.0.0R1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"3.21.0.0R1\"}],\"defaultStatus\":\"unaffected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E7",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/affected/4",
"excerpt": "{\"vendor\":\"Lantronix\",\"product\":\"E220 series\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"lessThan\":\"3.21.0.0R1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"3.21.0.0R1\"}],\"defaultStatus\":\"unaffected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E8",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/solutions/1/value",
"excerpt": "EDS5000 series: Upgrade to version 2.2.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E9",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/solutions/2/value",
"excerpt": "G520 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1889828865/Latest+firmware+for+the+G520+Series+G526+G526RP+G527+G528",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E10",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/solutions/3/value",
"excerpt": "X300 series: Upgrade to version 2.6.0.4R6 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2135261185/Latest+firmware+for+the+X300+Series+X300+X303+X304",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E11",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/solutions/4/value",
"excerpt": "E210 series: Upgrade to version 3.21.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1914404865/Latest+firmware+ePack+for+the+E210+Series+E213+E214+E215+E218+Cellular+Routers",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E12",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67038.json",
"sourceField": "/containers/cna/solutions/5/value",
"excerpt": "E220 series: Upgrade to version 3.21.0.0R1 or later. The patch can be found here: \n https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1914437633/Latest+firmware+ePack+for+the+E220+Series+E224+E225+E228+Cellular+Routers",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E13",
"sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2025-67038\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2025-67038（EDS5000 series / G520 series / X300 series / E210 series / E220 series）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・EDS5000 系列はバージョン 2.1.0.0R3 以下が影響を受けます。\n・G520 系列はバージョン 2.6.0.4R6 未満が影響を受けます。\n・X300 系列はバージョン 2.6.0.4R6 未満が影響を受けます。\n・E210 系列はバージョン 3.21.0.0R1 未満が影響を受けます。\n・E220 系列はバージョン 3.21.0.0R1 未満が影響を受けます。\n・公式の対象表：Lantronix / EDS5000 series。影響ありとして記載：2.1.0.0R3以下の版。影響なしとして記載：2.2.0.0R1。\n・公式の対象表：Lantronix / G520 series。影響ありとして記載：2.6.0.4R6未満の版。影響なしとして記載：2.6.0.4R6。\n・公式の対象表：Lantronix / X300 series。影響ありとして記載：2.6.0.4R6未満の版。影響なしとして記載：2.6.0.4R6。\n・公式の対象表：Lantronix / E210 series。影響ありとして記載：3.21.0.0R1未満の版。影響なしとして記載：3.21.0.0R1。\n・公式の対象表：Lantronix / E220 series。影響ありとして記載：3.21.0.0R1未満の版。影響なしとして記載：3.21.0.0R1。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-67038",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:17.808Z",
"lastSuccess": "2026-10-23T03:23:17.808Z",
"sourceCheckedAt": "2026-10-23T02:43:40.193Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-34908",
"aliases": [],
"title": "UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP：脆弱性情報",
"summary": "ネットワークにアクセスできる攻撃者が、UniFi OS デバイスの不適切なアクセス制御の脆弱性を悪用し、システムに対して許可されていない変更を行うことができる。",
"risk": "攻撃者がシステム設定を不正に変更できる可能性がある。",
"product": "UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 10,
"cvssVersion": "3.1",
"cvssSource": "hackerone",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"affected": [
{
"product": "UniFi OS Server",
"range": "< 5.0.8"
},
{
"product": "UDM",
"range": "< 5.1.12"
},
{
"product": "UDM-Pro",
"range": "< 5.1.12"
},
{
"product": "UDM-SE",
"range": "< 5.1.12"
},
{
"product": "UDM-Pro-Max",
"range": "< 5.1.12"
},
{
"product": "UDM-Beast",
"range": "< 5.1.11"
},
{
"product": "EFG",
"range": "< 5.1.12"
},
{
"product": "UDW",
"range": "< 5.1.12"
},
{
"product": "UDR",
"range": "< 5.1.12"
},
{
"product": "UDR7",
"range": "< 5.1.12"
},
{
"product": "UDR-5G",
"range": "< 5.1.12"
},
{
"product": "Express 7",
"range": "< 5.1.12"
},
{
"product": "UNVR",
"range": "< 5.1.12"
},
{
"product": "UNVR-Pro",
"range": "< 5.1.12"
},
{
"product": "UNVR-Instant",
"range": "< 5.1.12"
},
{
"product": "UNVR-G2",
"range": "< 5.1.12"
},
{
"product": "UNVR-G2-Pro",
"range": "< 5.1.12"
},
{
"product": "ENVR",
"range": "< 5.1.12"
},
{
"product": "ENVR-Core",
"range": "< 5.1.12"
},
{
"product": "UNAS-2",
"range": "< 5.1.10"
},
{
"product": "UNAS-4",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro-4",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro-8",
"range": "< 5.1.10"
},
{
"product": "UCKP",
"range": "< 5.1.12"
},
{
"product": "UCK",
"range": "< 5.1.12"
},
{
"product": "UCK-Enterprise",
"range": "< 5.1.12"
},
{
"product": "UCG-Ultra",
"range": "< 5.1.12"
},
{
"product": "UCG-Max",
"range": "< 5.1.12"
},
{
"product": "UCG-Fiber",
"range": "< 5.1.12"
},
{
"product": "UCG-Industrial",
"range": "< 5.1.12"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"label": "CVE：hackerone"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34908",
"label": "CVE公式レコード"
},
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34908",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-05-22T00:43:49.077Z",
"modifiedAt": "2026-06-24T03:55:50.177Z",
"fetchedAt": "2026-10-23T02:43:48.526Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.",
"sourceTitle": "",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UniFi OS Server",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.0.8",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-SE",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro-Max",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Beast",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.11",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "EFG",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDW",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR7",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR-5G",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "Express 7",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-Instant",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "ENVR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "ENVR-Core",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-2",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-4",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-4",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-8",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCKP",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCK",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCK-Enterprise",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Ultra",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Max",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Fiber",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Industrial",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-34908",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"fetchedAt": "2026-10-23T02:43:48.526Z",
"publishedAt": "2026-05-22T00:43:49.077Z",
"modifiedAt": "2026-06-24T03:55:50.177Z",
"state": "published",
"provider": "hackerone",
"title": "",
"descriptions": [
{
"lang": "en",
"value": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Ubiquiti Inc",
"product": "UniFi OS Server",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "0",
"lessThan": "5.0.8",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM",
"sourcePath": "/containers/cna/affected/1",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/1/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro",
"sourcePath": "/containers/cna/affected/2",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/2/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-SE",
"sourcePath": "/containers/cna/affected/3",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/3/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro-Max",
"sourcePath": "/containers/cna/affected/4",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/4/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Beast",
"sourcePath": "/containers/cna/affected/5",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/5/versions/0",
"version": "0",
"lessThan": "5.1.11",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "EFG",
"sourcePath": "/containers/cna/affected/6",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/6/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDW",
"sourcePath": "/containers/cna/affected/7",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/7/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR",
"sourcePath": "/containers/cna/affected/8",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/8/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR7",
"sourcePath": "/containers/cna/affected/9",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/9/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR-5G",
"sourcePath": "/containers/cna/affected/10",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/10/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "Express 7",
"sourcePath": "/containers/cna/affected/11",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/11/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR",
"sourcePath": "/containers/cna/affected/12",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/12/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-Pro",
"sourcePath": "/containers/cna/affected/13",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/13/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-Instant",
"sourcePath": "/containers/cna/affected/14",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/14/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2",
"sourcePath": "/containers/cna/affected/15",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/15/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2-Pro",
"sourcePath": "/containers/cna/affected/16",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/16/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "ENVR",
"sourcePath": "/containers/cna/affected/17",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/17/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "ENVR-Core",
"sourcePath": "/containers/cna/affected/18",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/18/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-2",
"sourcePath": "/containers/cna/affected/19",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/19/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-4",
"sourcePath": "/containers/cna/affected/20",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/20/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro",
"sourcePath": "/containers/cna/affected/21",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/21/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-4",
"sourcePath": "/containers/cna/affected/22",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/22/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-8",
"sourcePath": "/containers/cna/affected/23",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/23/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCKP",
"sourcePath": "/containers/cna/affected/24",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/24/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCK",
"sourcePath": "/containers/cna/affected/25",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/25/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCK-Enterprise",
"sourcePath": "/containers/cna/affected/26",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/26/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Ultra",
"sourcePath": "/containers/cna/affected/27",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/27/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Max",
"sourcePath": "/containers/cna/affected/28",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/28/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Fiber",
"sourcePath": "/containers/cna/affected/29",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/29/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Industrial",
"sourcePath": "/containers/cna/affected/30",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/30/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-284",
"lang": "en",
"description": "CWE-284 Improper Access Control - Generic",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"provider": "hackerone",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "hackerone",
"tags": [],
"provider": "hackerone",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/",
"label": "CISA-ADP",
"tags": [
"third-party-advisory"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34908",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UniFi OS Server\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.0.8\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/2",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/3",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-SE\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/4",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/5",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Beast\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.11\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/6",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/6",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"EFG\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/7",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/7",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDW\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/8",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/8",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/9",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/9",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/10",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/10",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR-5G\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/11",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/11",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express 7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/12",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/12",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/13",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/13",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/14",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/14",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Instant\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/15",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/15",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/16",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/16",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/17",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/17",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/18",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/18",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR-Core\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/19",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/19",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/20",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/20",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/21",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/21",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/22",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/22",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/23",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/23",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-8\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/24",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/24",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCKP\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/25",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/25",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/26",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/26",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK-Enterprise\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/27",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/27",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Ultra\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/28",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/28",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/29",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/29",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Fiber\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/30",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/affected/30",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Industrial\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"type\":\"CWE\",\"lang\":\"en\",\"cweId\":\"CWE-284\",\"description\":\"CWE-284 Improper Access Control - Generic\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-24T03:55:50.177Z",
"fetchedAt": "2026-10-23T02:43:48.526Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-23T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKPに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:18.596Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "45d7dbb0d83b161a585c1a8e52e322d7386d761ea747dcc9e2d54e436ae5b5ad",
"sourceModifiedAt": "2026-06-24T03:55:50.177Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "ネットワークにアクセスできる攻撃者が、UniFi OS デバイスの不適切なアクセス制御の脆弱性を悪用し、システムに対して許可されていない変更を行うことができる。",
"risk": "攻撃者がシステム設定を不正に変更できる可能性がある。",
"summaryEvidenceIds": [
"E1"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "ネットワークにアクセスできる攻撃者が対象となる。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UniFi OS Server。影響ありとして記載：5.0.8未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-SE。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E5"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Pro-Max。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E6"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Beast。影響ありとして記載：5.1.11未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E7"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / EFG。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E8"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDW。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E9"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E10"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR7。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E11"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR-5G。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E12"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / Express 7。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E13"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E14"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E15"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-Instant。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E16"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-G2。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E17"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-G2-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E18"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / ENVR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E19"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / ENVR-Core。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E20"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-2。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E21"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-4。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E22"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E23"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro-4。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E24"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro-8。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E25"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCKP。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E26"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCK。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E27"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCK-Enterprise。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E28"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Ultra。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E29"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Max。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E30"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Fiber。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E31"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Industrial。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E32"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908"
],
"evidenceIds": [
"E33"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "「UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-34908",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34908"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E2"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-34908",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34908"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-34908",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34908"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"label": "CVE：hackerone"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34908",
"label": "CVE公式レコード"
},
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34908",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UniFi OS Server\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.0.8\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/1",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/2",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/3",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-SE\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E6",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/4",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E7",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/5",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Beast\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.11\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E8",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/6",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"EFG\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E9",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/7",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDW\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E10",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/8",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E11",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/9",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E12",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/10",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR-5G\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E13",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/11",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express 7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E14",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/12",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E15",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/13",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E16",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/14",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Instant\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E17",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/15",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E18",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/16",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E19",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/17",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E20",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/18",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR-Core\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E21",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/19",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E22",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/20",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E23",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/21",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E24",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/22",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E25",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/23",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-8\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E26",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/24",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCKP\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E27",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/25",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E28",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/26",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK-Enterprise\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E29",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/27",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Ultra\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E30",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/28",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E31",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/29",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Fiber\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E32",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34908.json",
"sourceField": "/containers/cna/affected/30",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Industrial\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E33",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34908",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-34908\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-34908（UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ネットワークにアクセスできる攻撃者が対象となる。\n・公式の対象表：Ubiquiti Inc / UniFi OS Server。影響ありとして記載：5.0.8未満の版。\n・公式の対象表：Ubiquiti Inc / UDM。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-SE。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Pro-Max。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Beast。影響ありとして記載：5.1.11未満の版。\n・公式の対象表：Ubiquiti Inc / EFG。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDW。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR7。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR-5G。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / Express 7。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-Instant。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-G2。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-G2-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / ENVR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / ENVR-Core。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-2。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-4。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro-4。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro-8。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UCKP。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCK。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCK-Enterprise。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Ultra。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Max。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Fiber。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Industrial。影響ありとして記載：5.1.12未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-34908",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:18.596Z",
"lastSuccess": "2026-10-23T03:23:18.596Z",
"sourceCheckedAt": "2026-10-23T02:43:48.526Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-34909",
"aliases": [],
"title": "UniFi OS Server / Express / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pr：ファイルへの不正アクセス",
"summary": "ネットワークに接続できる攻撃者が、UniFi OS デバイスに存在するパス・トラバーサル脆弱性を悪用すると、基盤システム上のファイルにアクセスでき、そのファイルを操作して基盤アカウントにアクセスできる可能性があります。",
"risk": "攻撃者が基盤アカウントにアクセスできる可能性があります。",
"product": "UniFi OS Server / Express / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pr",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 10,
"cvssVersion": "3.1",
"cvssSource": "hackerone",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"affected": [
{
"product": "UniFi OS Server",
"range": "< 5.0.8"
},
{
"product": "Express",
"range": "< 4.0.14"
},
{
"product": "UDM",
"range": "< 5.1.12"
},
{
"product": "UDM-Pro",
"range": "< 5.1.12"
},
{
"product": "UDM-SE",
"range": "< 5.1.12"
},
{
"product": "UDM-Pro-Max",
"range": "< 5.1.12"
},
{
"product": "UDM-Beast",
"range": "< 5.1.11"
},
{
"product": "EFG",
"range": "< 5.1.12"
},
{
"product": "UDW",
"range": "< 5.1.12"
},
{
"product": "UDR",
"range": "< 5.1.12"
},
{
"product": "UDR7",
"range": "< 5.1.12"
},
{
"product": "UDR-5G",
"range": "< 5.1.12"
},
{
"product": "Express 7",
"range": "< 5.1.12"
},
{
"product": "UNVR",
"range": "< 5.1.12"
},
{
"product": "UNVR-Pro",
"range": "< 5.1.12"
},
{
"product": "UNVR-Instant",
"range": "< 5.1.12"
},
{
"product": "UNVR-G2",
"range": "< 5.1.12"
},
{
"product": "UNVR-G2-Pro",
"range": "< 5.1.12"
},
{
"product": "ENVR",
"range": "< 5.1.12"
},
{
"product": "ENVR-Core",
"range": "< 5.1.12"
},
{
"product": "UNAS-2",
"range": "< 5.1.10"
},
{
"product": "UNAS-4",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro-4",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro-8",
"range": "< 5.1.10"
},
{
"product": "UCKP",
"range": "< 5.1.12"
},
{
"product": "UCK",
"range": "< 5.1.12"
},
{
"product": "UCK-Enterprise",
"range": "< 5.1.12"
},
{
"product": "UCG-Ultra",
"range": "< 5.1.12"
},
{
"product": "UCG-Max",
"range": "< 5.1.12"
},
{
"product": "UCG-Fiber",
"range": "< 5.1.12"
},
{
"product": "UCG-Industrial",
"range": "< 5.1.12"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"label": "CVE：hackerone"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34909",
"label": "CVE公式レコード"
},
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34909",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-05-22T00:43:49.072Z",
"modifiedAt": "2026-06-24T03:56:19.760Z",
"fetchedAt": "2026-10-23T02:43:48.529Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.",
"sourceTitle": "",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UniFi OS Server",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.0.8",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "Express",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "4.0.14",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-SE",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro-Max",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Beast",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.11",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "EFG",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDW",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR7",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR-5G",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "Express 7",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-Instant",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "ENVR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "ENVR-Core",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-2",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-4",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-4",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-8",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCKP",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCK",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCK-Enterprise",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Ultra",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Max",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Fiber",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Industrial",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-34909",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"fetchedAt": "2026-10-23T02:43:48.529Z",
"publishedAt": "2026-05-22T00:43:49.072Z",
"modifiedAt": "2026-06-24T03:56:19.760Z",
"state": "published",
"provider": "hackerone",
"title": "",
"descriptions": [
{
"lang": "en",
"value": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Ubiquiti Inc",
"product": "UniFi OS Server",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "0",
"lessThan": "5.0.8",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "Express",
"sourcePath": "/containers/cna/affected/1",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/1/versions/0",
"version": "0",
"lessThan": "4.0.14",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM",
"sourcePath": "/containers/cna/affected/2",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/2/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro",
"sourcePath": "/containers/cna/affected/3",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/3/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-SE",
"sourcePath": "/containers/cna/affected/4",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/4/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro-Max",
"sourcePath": "/containers/cna/affected/5",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/5/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Beast",
"sourcePath": "/containers/cna/affected/6",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/6/versions/0",
"version": "0",
"lessThan": "5.1.11",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "EFG",
"sourcePath": "/containers/cna/affected/7",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/7/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDW",
"sourcePath": "/containers/cna/affected/8",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/8/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR",
"sourcePath": "/containers/cna/affected/9",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/9/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR7",
"sourcePath": "/containers/cna/affected/10",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/10/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR-5G",
"sourcePath": "/containers/cna/affected/11",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/11/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "Express 7",
"sourcePath": "/containers/cna/affected/12",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/12/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR",
"sourcePath": "/containers/cna/affected/13",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/13/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-Pro",
"sourcePath": "/containers/cna/affected/14",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/14/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-Instant",
"sourcePath": "/containers/cna/affected/15",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/15/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2",
"sourcePath": "/containers/cna/affected/16",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/16/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2-Pro",
"sourcePath": "/containers/cna/affected/17",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/17/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "ENVR",
"sourcePath": "/containers/cna/affected/18",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/18/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "ENVR-Core",
"sourcePath": "/containers/cna/affected/19",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/19/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-2",
"sourcePath": "/containers/cna/affected/20",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/20/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-4",
"sourcePath": "/containers/cna/affected/21",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/21/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro",
"sourcePath": "/containers/cna/affected/22",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/22/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-4",
"sourcePath": "/containers/cna/affected/23",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/23/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-8",
"sourcePath": "/containers/cna/affected/24",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/24/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCKP",
"sourcePath": "/containers/cna/affected/25",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/25/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCK",
"sourcePath": "/containers/cna/affected/26",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/26/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCK-Enterprise",
"sourcePath": "/containers/cna/affected/27",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/27/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Ultra",
"sourcePath": "/containers/cna/affected/28",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/28/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Max",
"sourcePath": "/containers/cna/affected/29",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/29/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Fiber",
"sourcePath": "/containers/cna/affected/30",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/30/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Industrial",
"sourcePath": "/containers/cna/affected/31",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/31/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-22",
"lang": "en",
"description": "CWE-22 Path Traversal",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"provider": "hackerone",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "hackerone",
"tags": [],
"provider": "hackerone",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/",
"label": "CISA-ADP",
"tags": [
"third-party-advisory"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34909",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UniFi OS Server\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.0.8\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"4.0.14\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/2",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/3",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/4",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-SE\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/5",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/6",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/6",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Beast\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.11\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/7",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/7",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"EFG\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/8",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/8",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDW\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/9",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/9",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/10",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/10",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/11",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/11",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR-5G\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/12",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/12",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express 7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/13",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/13",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/14",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/14",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/15",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/15",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Instant\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/16",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/16",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/17",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/17",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/18",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/18",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/19",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/19",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR-Core\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/20",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/20",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/21",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/21",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/22",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/22",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/23",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/23",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/24",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/24",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-8\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/25",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/25",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCKP\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/26",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/26",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/27",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/27",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK-Enterprise\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/28",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/28",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Ultra\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/29",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/29",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/30",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/30",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Fiber\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/31",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/affected/31",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Industrial\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"type\":\"CWE\",\"lang\":\"en\",\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Path Traversal\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-24T03:56:19.760Z",
"fetchedAt": "2026-10-23T02:43:48.529Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-23T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "UniFi OS Server / Express / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Prにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:19.038Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "701e272fa67d1326549c66ca7f951d069268df99b241536238fa1974ff0611a7",
"sourceModifiedAt": "2026-06-24T03:56:19.760Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "ネットワークに接続できる攻撃者が、UniFi OS デバイスに存在するパス・トラバーサル脆弱性を悪用すると、基盤システム上のファイルにアクセスでき、そのファイルを操作して基盤アカウントにアクセスできる可能性があります。",
"risk": "攻撃者が基盤アカウントにアクセスできる可能性があります。",
"summaryEvidenceIds": [
"E1"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "ネットワークに接続できる攻撃者が、UniFi OS デバイス上でこの脆弱性を悪用できる。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UniFi OS Server。影響ありとして記載：5.0.8未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / Express。影響ありとして記載：4.0.14未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E5"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-SE。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E6"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Pro-Max。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E7"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Beast。影響ありとして記載：5.1.11未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E8"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / EFG。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E9"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDW。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E10"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E11"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR7。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E12"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR-5G。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E13"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / Express 7。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E14"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E15"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E16"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-Instant。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E17"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-G2。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E18"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-G2-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E19"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / ENVR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E20"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / ENVR-Core。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E21"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-2。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E22"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-4。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E23"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E24"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro-4。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E25"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro-8。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E26"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCKP。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E27"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCK。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E28"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCK-Enterprise。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E29"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Ultra。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E30"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Max。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E31"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Fiber。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E32"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Industrial。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E33"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909"
],
"evidenceIds": [
"E34"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "「UniFi OS Server / Express / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pr」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-34909",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34909"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E2"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-34909",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34909"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-34909",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34909"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"label": "CVE：hackerone"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34909",
"label": "CVE公式レコード"
},
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34909",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UniFi OS Server\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.0.8\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/1",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"4.0.14\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/2",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/3",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E6",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/4",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-SE\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E7",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/5",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E8",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/6",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Beast\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.11\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E9",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/7",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"EFG\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E10",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/8",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDW\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E11",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/9",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E12",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/10",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E13",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/11",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR-5G\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E14",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/12",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express 7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E15",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/13",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E16",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/14",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E17",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/15",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Instant\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E18",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/16",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E19",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/17",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E20",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/18",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E21",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/19",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR-Core\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E22",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/20",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E23",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/21",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E24",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/22",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E25",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/23",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E26",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/24",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-8\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E27",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/25",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCKP\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E28",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/26",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E29",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/27",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK-Enterprise\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E30",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/28",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Ultra\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E31",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/29",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E32",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/30",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Fiber\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E33",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34909.json",
"sourceField": "/containers/cna/affected/31",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Industrial\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E34",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34909",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-34909\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-34909（UniFi OS Server / Express / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pr）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ネットワークに接続できる攻撃者が、UniFi OS デバイス上でこの脆弱性を悪用できる。\n・公式の対象表：Ubiquiti Inc / UniFi OS Server。影響ありとして記載：5.0.8未満の版。\n・公式の対象表：Ubiquiti Inc / Express。影響ありとして記載：4.0.14未満の版。\n・公式の対象表：Ubiquiti Inc / UDM。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-SE。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Pro-Max。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Beast。影響ありとして記載：5.1.11未満の版。\n・公式の対象表：Ubiquiti Inc / EFG。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDW。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR7。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR-5G。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / Express 7。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-Instant。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-G2。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-G2-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / ENVR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / ENVR-Core。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-2。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-4。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro-4。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro-8。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UCKP。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCK。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCK-Enterprise。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Ultra。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Max。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Fiber。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Industrial。影響ありとして記載：5.1.12未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-34909",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:19.038Z",
"lastSuccess": "2026-10-23T03:23:19.038Z",
"sourceCheckedAt": "2026-10-23T02:43:48.529Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-34910",
"aliases": [],
"title": "UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP：脆弱性情報",
"summary": "ネットワークにアクセスできる攻撃者が、UniFi OS デバイスにおける入力検証不備を利用して、コマンドインジェクションを実行できる脆弱性です。",
"risk": "攻撃者がデバイス上で任意のコマンドを実行できる可能性があります。",
"product": "UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 10,
"cvssVersion": "3.1",
"cvssSource": "hackerone",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"affected": [
{
"product": "UniFi OS Server",
"range": "< 5.0.8"
},
{
"product": "UDM",
"range": "< 5.1.12"
},
{
"product": "UDM-Pro",
"range": "< 5.1.12"
},
{
"product": "UDM-SE",
"range": "< 5.1.12"
},
{
"product": "UDM-Pro-Max",
"range": "< 5.1.12"
},
{
"product": "UDM-Beast",
"range": "< 5.1.11"
},
{
"product": "EFG",
"range": "< 5.1.12"
},
{
"product": "UDW",
"range": "< 5.1.12"
},
{
"product": "UDR",
"range": "< 5.1.12"
},
{
"product": "UDR7",
"range": "< 5.1.12"
},
{
"product": "UDR-5G",
"range": "< 5.1.12"
},
{
"product": "Express 7",
"range": "< 5.1.12"
},
{
"product": "UNVR",
"range": "< 5.1.12"
},
{
"product": "UNVR-Pro",
"range": "< 5.1.12"
},
{
"product": "UNVR-Instant",
"range": "< 5.1.12"
},
{
"product": "UNVR-G2",
"range": "< 5.1.12"
},
{
"product": "UNVR-G2-Pro",
"range": "< 5.1.12"
},
{
"product": "ENVR",
"range": "< 5.1.12"
},
{
"product": "ENVR-Core",
"range": "< 5.1.12"
},
{
"product": "UNAS-2",
"range": "< 5.1.10"
},
{
"product": "UNAS-4",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro-4",
"range": "< 5.1.10"
},
{
"product": "UNAS-Pro-8",
"range": "< 5.1.10"
},
{
"product": "UCKP",
"range": "< 5.1.12"
},
{
"product": "UCK",
"range": "< 5.1.12"
},
{
"product": "UCK-Enterprise",
"range": "< 5.1.12"
},
{
"product": "UCG-Ultra",
"range": "< 5.1.12"
},
{
"product": "UCG-Max",
"range": "< 5.1.12"
},
{
"product": "UCG-Fiber",
"range": "< 5.1.12"
},
{
"product": "UCG-Industrial",
"range": "< 5.1.12"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"label": "CVE：hackerone"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34910",
"label": "CVE公式レコード"
},
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34910",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-05-22T00:43:49.096Z",
"modifiedAt": "2026-06-24T03:55:52.177Z",
"fetchedAt": "2026-10-23T02:43:48.540Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.",
"sourceTitle": "",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UniFi OS Server",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.0.8",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-SE",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro-Max",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDM-Beast",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.11",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "EFG",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDW",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR7",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UDR-5G",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "Express 7",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-Instant",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "ENVR",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "ENVR-Core",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-2",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-4",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-4",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-8",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.10",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCKP",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCK",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCK-Enterprise",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Ultra",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Max",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Fiber",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"vendor": "Ubiquiti Inc",
"product": "UCG-Industrial",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "5.1.12",
"versionType": "semver"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-34910",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"fetchedAt": "2026-10-23T02:43:48.540Z",
"publishedAt": "2026-05-22T00:43:49.096Z",
"modifiedAt": "2026-06-24T03:55:52.177Z",
"state": "published",
"provider": "hackerone",
"title": "",
"descriptions": [
{
"lang": "en",
"value": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Ubiquiti Inc",
"product": "UniFi OS Server",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "0",
"lessThan": "5.0.8",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM",
"sourcePath": "/containers/cna/affected/1",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/1/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro",
"sourcePath": "/containers/cna/affected/2",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/2/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-SE",
"sourcePath": "/containers/cna/affected/3",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/3/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Pro-Max",
"sourcePath": "/containers/cna/affected/4",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/4/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDM-Beast",
"sourcePath": "/containers/cna/affected/5",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/5/versions/0",
"version": "0",
"lessThan": "5.1.11",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "EFG",
"sourcePath": "/containers/cna/affected/6",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/6/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDW",
"sourcePath": "/containers/cna/affected/7",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/7/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR",
"sourcePath": "/containers/cna/affected/8",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/8/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR7",
"sourcePath": "/containers/cna/affected/9",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/9/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UDR-5G",
"sourcePath": "/containers/cna/affected/10",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/10/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "Express 7",
"sourcePath": "/containers/cna/affected/11",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/11/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR",
"sourcePath": "/containers/cna/affected/12",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/12/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-Pro",
"sourcePath": "/containers/cna/affected/13",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/13/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-Instant",
"sourcePath": "/containers/cna/affected/14",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/14/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2",
"sourcePath": "/containers/cna/affected/15",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/15/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNVR-G2-Pro",
"sourcePath": "/containers/cna/affected/16",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/16/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "ENVR",
"sourcePath": "/containers/cna/affected/17",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/17/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "ENVR-Core",
"sourcePath": "/containers/cna/affected/18",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/18/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-2",
"sourcePath": "/containers/cna/affected/19",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/19/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-4",
"sourcePath": "/containers/cna/affected/20",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/20/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro",
"sourcePath": "/containers/cna/affected/21",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/21/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-4",
"sourcePath": "/containers/cna/affected/22",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/22/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UNAS-Pro-8",
"sourcePath": "/containers/cna/affected/23",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/23/versions/0",
"version": "0",
"lessThan": "5.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCKP",
"sourcePath": "/containers/cna/affected/24",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/24/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCK",
"sourcePath": "/containers/cna/affected/25",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/25/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCK-Enterprise",
"sourcePath": "/containers/cna/affected/26",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/26/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Ultra",
"sourcePath": "/containers/cna/affected/27",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/27/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Max",
"sourcePath": "/containers/cna/affected/28",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/28/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Fiber",
"sourcePath": "/containers/cna/affected/29",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/29/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Ubiquiti Inc",
"product": "UCG-Industrial",
"sourcePath": "/containers/cna/affected/30",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/30/versions/0",
"version": "0",
"lessThan": "5.1.12",
"versionType": "semver",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-20",
"lang": "en",
"description": "CWE-20 Improper Input Validation",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"provider": "hackerone",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "hackerone",
"tags": [],
"provider": "hackerone",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/",
"label": "CISA-ADP",
"tags": [
"third-party-advisory"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34910",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UniFi OS Server\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.0.8\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/2",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/3",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-SE\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/4",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/5",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Beast\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.11\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/6",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/6",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"EFG\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/7",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/7",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDW\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/8",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/8",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/9",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/9",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/10",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/10",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR-5G\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/11",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/11",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express 7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/12",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/12",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/13",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/13",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/14",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/14",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Instant\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/15",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/15",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/16",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/16",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/17",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/17",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/18",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/18",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR-Core\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/19",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/19",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/20",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/20",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/21",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/21",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/22",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/22",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/23",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/23",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-8\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/24",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/24",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCKP\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/25",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/25",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/26",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/26",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK-Enterprise\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/27",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/27",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Ultra\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/28",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/28",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/29",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/29",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Fiber\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/30",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/affected/30",
"text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Industrial\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"type\":\"CWE\",\"lang\":\"en\",\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper Input Validation\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-24T03:55:52.177Z",
"fetchedAt": "2026-10-23T02:43:48.540Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-23T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKPに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:19.426Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "9e42f3050286750581be4ac310ae80527221678b635af4cb5e05a546b9325eee",
"sourceModifiedAt": "2026-06-24T03:55:52.177Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "ネットワークにアクセスできる攻撃者が、UniFi OS デバイスにおける入力検証不備を利用して、コマンドインジェクションを実行できる脆弱性です。",
"risk": "攻撃者がデバイス上で任意のコマンドを実行できる可能性があります。",
"summaryEvidenceIds": [
"E1"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "ネットワークにアクセスできる攻撃者が対象の UniFi OS デバイスに対して攻撃を行える。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UniFi OS Server。影響ありとして記載：5.0.8未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-SE。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E5"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Pro-Max。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E6"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDM-Beast。影響ありとして記載：5.1.11未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E7"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / EFG。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E8"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDW。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E9"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E10"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR7。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E11"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UDR-5G。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E12"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / Express 7。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E13"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E14"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E15"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-Instant。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E16"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-G2。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E17"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNVR-G2-Pro。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E18"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / ENVR。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E19"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / ENVR-Core。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E20"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-2。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E21"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-4。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E22"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E23"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro-4。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E24"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UNAS-Pro-8。影響ありとして記載：5.1.10未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E25"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCKP。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E26"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCK。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E27"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCK-Enterprise。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E28"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Ultra。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E29"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Max。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E30"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Fiber。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E31"
]
},
{
"text": "公式の対象表：Ubiquiti Inc / UCG-Industrial。影響ありとして記載：5.1.12未満の版。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E32"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910"
],
"evidenceIds": [
"E33"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "「UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-34910",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34910"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E2"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-34910",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34910"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-34910",
"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34910"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"label": "CVE：hackerone"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34910",
"label": "CVE公式レコード"
},
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34910",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UniFi OS Server\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.0.8\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/1",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/2",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/3",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-SE\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E6",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/4",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Pro-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E7",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/5",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDM-Beast\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.11\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E8",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/6",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"EFG\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E9",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/7",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDW\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E10",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/8",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E11",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/9",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E12",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/10",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UDR-5G\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E13",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/11",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express 7\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E14",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/12",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E15",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/13",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E16",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/14",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-Instant\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E17",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/15",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E18",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/16",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNVR-G2-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E19",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/17",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E20",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/18",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"ENVR-Core\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E21",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/19",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-2\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E22",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/20",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E23",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/21",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E24",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/22",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-4\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E25",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/23",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UNAS-Pro-8\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.10\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E26",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/24",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCKP\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E27",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/25",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E28",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/26",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCK-Enterprise\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E29",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/27",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Ultra\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E30",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/28",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Max\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E31",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/29",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Fiber\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E32",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34910.json",
"sourceField": "/containers/cna/affected/30",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ubiquiti Inc\",\"product\":\"UCG-Industrial\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.1.12\",\"versionType\":\"semver\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E33",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34910",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-34910\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-34910（UniFi OS Server / UDM / UDM-Pro / UDM-SE / UDM-Pro-Max / UDM-Beast / EFG / UDW / UDR / UDR7 / UDR-5G / Express 7 / UNVR / UNVR-Pro / UNVR-Instant / UNVR-G2 / UNVR-G2-Pro / ENVR / ENVR-Core / UNAS-2 / UNAS-4 / UNAS-Pro / UNAS-Pro-4 / UNAS-Pro-8 / UCKP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ネットワークにアクセスできる攻撃者が対象の UniFi OS デバイスに対して攻撃を行える。\n・公式の対象表：Ubiquiti Inc / UniFi OS Server。影響ありとして記載：5.0.8未満の版。\n・公式の対象表：Ubiquiti Inc / UDM。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-SE。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Pro-Max。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDM-Beast。影響ありとして記載：5.1.11未満の版。\n・公式の対象表：Ubiquiti Inc / EFG。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDW。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR7。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UDR-5G。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / Express 7。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-Instant。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-G2。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNVR-G2-Pro。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / ENVR。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / ENVR-Core。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-2。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-4。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro-4。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UNAS-Pro-8。影響ありとして記載：5.1.10未満の版。\n・公式の対象表：Ubiquiti Inc / UCKP。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCK。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCK-Enterprise。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Ultra。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Max。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Fiber。影響ありとして記載：5.1.12未満の版。\n・公式の対象表：Ubiquiti Inc / UCG-Industrial。影響ありとして記載：5.1.12未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-34910",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:19.426Z",
"lastSuccess": "2026-10-23T03:23:19.426Z",
"sourceCheckedAt": "2026-10-23T02:43:48.540Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-20253",
"aliases": [],
"title": "Splunk Enterprise：脆弱性情報",
"summary": "Splunk Enterprise のバージョン 10.2 系で 10.2.4 未満、または 10 系で 10.0.7 未満の場合、認証されていないユーザーが PostgreSQL サイドカーサービスのエンドポイントを通じて任意のファイルを作成したり切り詰めたりできる。このエンドポイントは認証制御がなく、ネットワークから到達可能なユーザーは資格情報なしでファイル操作を呼び出すことができる。バージョン 9.4 以前は影響を受けない。すぐに修正済みバージョンにアップグレードできない場合は、PostgreSQL サイドカーサービスを無効化することで緩和できる。",
"risk": "攻撃者が任意のファイルを作成または切り詰めることができる。",
"product": "Splunk Enterprise",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 9.8,
"cvssVersion": "3.1",
"cvssSource": "cisco",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"affected": [
{
"product": "Splunk Enterprise",
"range": ">= 10.2 / < 10.2.4"
},
{
"product": "Splunk Enterprise",
"range": ">= 10.0 / < 10.0.7"
}
],
"fixed": [],
"steps": [
"Splunk Enterprise をバージョン 10.2.4 以上または 10.0.7 以上にアップグレードする。",
"「CVE-2026-20253」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20253",
"label": "CVE公式レコード"
},
{
"url": "https://advisory.splunk.com/advisories/SVD-2026-0603",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20253",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-10T17:16:21.242Z",
"modifiedAt": "2026-06-19T03:55:19.206Z",
"fetchedAt": "2026-10-23T02:43:47.452Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls, allowing any network-reachable user to invoke file operations without credentials. Splunk Enterprise versions 9.4 and earlier are not affected. If you cannot immediately upgrade to a fixed version, you can mitigate this vulnerability by disabling the PostgreSQL sidecar service.",
"sourceTitle": "Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"product": "Splunk Enterprise",
"vendor": "Splunk",
"versions": [
{
"version": "10.2",
"status": "affected",
"versionType": "custom",
"lessThan": "10.2.4"
},
{
"version": "10.0",
"status": "affected",
"versionType": "custom",
"lessThan": "10.0.7"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-20253",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"fetchedAt": "2026-10-23T02:43:47.452Z",
"publishedAt": "2026-06-10T17:16:21.242Z",
"modifiedAt": "2026-06-19T03:55:19.206Z",
"state": "published",
"provider": "cisco",
"title": "Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise",
"descriptions": [
{
"lang": "en",
"value": "In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls, allowing any network-reachable user to invoke file operations without credentials. Splunk Enterprise versions 9.4 and earlier are not affected. If you cannot immediately upgrade to a fixed version, you can mitigate this vulnerability by disabling the PostgreSQL sidecar service.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Splunk",
"product": "Splunk Enterprise",
"sourcePath": "/containers/cna/affected/0",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "10.2",
"lessThan": "10.2.4",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "10.0",
"lessThan": "10.0.7",
"versionType": "custom",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-306",
"lang": "en",
"description": "The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"provider": "cisco",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://advisory.splunk.com/advisories/SVD-2026-0603",
"label": "cisco",
"tags": [],
"provider": "cisco",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/",
"label": "CISA-ADP",
"tags": [
"exploit"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20253",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"product\":\"Splunk Enterprise\",\"vendor\":\"Splunk\",\"versions\":[{\"version\":\"10.2\",\"status\":\"affected\",\"versionType\":\"custom\",\"lessThan\":\"10.2.4\"},{\"version\":\"10.0\",\"status\":\"affected\",\"versionType\":\"custom\",\"lessThan\":\"10.0.7\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls, allowing any network-reachable user to invoke file operations without credentials. Splunk Enterprise versions 9.4 and earlier are not affected. If you cannot immediately upgrade to a fixed version, you can mitigate this vulnerability by disabling the PostgreSQL sidecar service.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"type\":\"cwe\",\"description\":\"The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.\",\"cweId\":\"CWE-306\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-19T03:55:19.206Z",
"fetchedAt": "2026-10-23T02:43:47.452Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-18T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "Splunk Enterpriseに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:19.982Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "e5d3e337e49051bc68dbf1a759cf07e639aceb4fd85831fc1309acdf2952f70d",
"sourceModifiedAt": "2026-06-19T03:55:19.206Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Splunk Enterprise のバージョン 10.2 系で 10.2.4 未満、または 10 系で 10.0.7 未満の場合、認証されていないユーザーが PostgreSQL サイドカーサービスのエンドポイントを通じて任意のファイルを作成したり切り詰めたりできる。このエンドポイントは認証制御がなく、ネットワークから到達可能なユーザーは資格情報なしでファイル操作を呼び出すことができる。バージョン 9.4 以前は影響を受けない。すぐに修正済みバージョンにアップグレードできない場合は、PostgreSQL サイドカーサービスを無効化することで緩和できる。",
"risk": "攻撃者が任意のファイルを作成または切り詰めることができる。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "Splunk Enterprise 10.2 系でバージョンが 10.2.4 未満のインスタンスは影響を受ける。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E1",
"E3",
"E2"
]
},
{
"text": "Splunk Enterprise 10 系でバージョンが 10.0.7 未満のインスタンスは影響を受ける。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E1",
"E3",
"E2"
]
},
{
"text": "Splunk Enterprise 9.4 以前のバージョンは影響を受けない。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "ネットワークから到達可能な認証されていないユーザーが PostgreSQL サイドカーサービスのエンドポイントにアクセスできる場合にこの問題が発生する。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "公式の対象表：Splunk / Splunk Enterprise。影響ありとして記載：10.2以上、10.2.4未満。影響ありとして記載：10.0以上、10.0.7未満。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Splunk Enterprise」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20253",
"https://advisory.splunk.com/advisories/SVD-2026-0603",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20253"
]
}
],
"actions": [
{
"text": "Splunk Enterprise をバージョン 10.2.4 以上または 10.0.7 以上にアップグレードする。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "「CVE-2026-20253」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-20253",
"https://advisory.splunk.com/advisories/SVD-2026-0603",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20253"
]
},
{
"text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20253",
"https://advisory.splunk.com/advisories/SVD-2026-0603",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20253"
]
}
],
"temporaryMitigations": [
{
"text": "PostgreSQL サイドカーサービスを無効化する。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E1"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20253",
"https://advisory.splunk.com/advisories/SVD-2026-0603",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20253"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20253",
"label": "CVE公式レコード"
},
{
"url": "https://advisory.splunk.com/advisories/SVD-2026-0603",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20253",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls, allowing any network-reachable user to invoke file operations without credentials. Splunk Enterprise versions 9.4 and earlier are not affected. If you cannot immediately upgrade to a fixed version, you can mitigate this vulnerability by disabling the PostgreSQL sidecar service.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"sourceField": "/containers/cna/title",
"excerpt": "Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20253.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"product\":\"Splunk Enterprise\",\"vendor\":\"Splunk\",\"versions\":[{\"version\":\"10.2\",\"status\":\"affected\",\"versionType\":\"custom\",\"lessThan\":\"10.2.4\"},{\"version\":\"10.0\",\"status\":\"affected\",\"versionType\":\"custom\",\"lessThan\":\"10.0.7\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20253",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-20253\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-20253（Splunk Enterprise）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Splunk Enterprise 10.2 系でバージョンが 10.2.4 未満のインスタンスは影響を受ける。\n・Splunk Enterprise 10 系でバージョンが 10.0.7 未満のインスタンスは影響を受ける。\n・Splunk Enterprise 9.4 以前のバージョンは影響を受けない。\n・ネットワークから到達可能な認証されていないユーザーが PostgreSQL サイドカーサービスのエンドポイントにアクセスできる場合にこの問題が発生する。\n・公式の対象表：Splunk / Splunk Enterprise。影響ありとして記載：10.2以上、10.2.4未満。影響ありとして記載：10.0以上、10.0.7未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20253",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:19.982Z",
"lastSuccess": "2026-10-23T03:23:19.982Z",
"sourceCheckedAt": "2026-10-23T02:43:47.452Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-48907",
"aliases": [],
"title": "Joomla Content Editor (JCE) extension for Joomla：コード実行",
"summary": "Joomla 用の JCE エディタ拡張に脆弱性があり、認証されていないユーザーが新しいエディタプロファイルを作成でき、その結果 PHP コードをアップロードして実行させられる可能性があります。",
"risk": "攻撃者がサーバー上で任意の PHP コードを実行できるため、サーバーが完全に制御される危険があります。",
"product": "Joomla Content Editor (JCE) extension for Joomla",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 10,
"cvssVersion": "4.0",
"cvssSource": "Joomla",
"cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red",
"affected": [
{
"product": "Joomla Content Editor (JCE) extension for Joomla",
"range": "1.0.0-2.9.99.4"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"label": "CVE：Joomla"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48907",
"label": "CVE公式レコード"
},
{
"url": "https://www.joomlacontenteditor.net/",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.joomlacontenteditor.net/support/changelog/editor",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48907",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-05T07:31:30.257Z",
"modifiedAt": "2026-06-20T11:56:48.886Z",
"fetchedAt": "2026-10-23T02:43:49.234Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.",
"sourceTitle": "Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"defaultStatus": "unaffected",
"product": "Joomla Content Editor (JCE) extension for Joomla",
"vendor": "joomlacontenteditor.net",
"versions": [
{
"status": "affected",
"version": "1.0.0-2.9.99.4"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-48907",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"fetchedAt": "2026-10-23T02:43:49.234Z",
"publishedAt": "2026-06-05T07:31:30.257Z",
"modifiedAt": "2026-06-20T11:56:48.886Z",
"state": "published",
"provider": "Joomla",
"title": "Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "joomlacontenteditor.net",
"product": "Joomla Content Editor (JCE) extension for Joomla",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unaffected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "1.0.0-2.9.99.4",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-284",
"lang": "en",
"description": "CWE-284 Improper Access Control",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"provider": "Joomla",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0"
}
],
"references": [
{
"url": "https://www.joomlacontenteditor.net/",
"label": "Joomla",
"tags": [
"product"
],
"provider": "Joomla",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites",
"label": "CISA-ADP",
"tags": [
"vendor-advisory"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48907",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Joomla Content Editor (JCE) extension for Joomla\",\"vendor\":\"joomlacontenteditor.net\",\"versions\":[{\"status\":\"affected\",\"version\":\"1.0.0-2.9.99.4\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"cweId\":\"CWE-284\",\"description\":\"CWE-284 Improper Access Control\",\"lang\":\"en\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV4_0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0",
"text": "{\"Automatable\":\"YES\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"exploitMaturity\":\"ATTACKED\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"RED\",\"subAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-20T11:56:48.886Z",
"fetchedAt": "2026-10-23T02:43:49.234Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-16T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "Joomla Content Editor (JCE) extension for Joomlaにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:20.593Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "14def313b95032fbfea54d5d5ba5b9c6c4dd768c685bb98c58a1558f63eaceac",
"sourceModifiedAt": "2026-06-20T11:56:48.886Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Joomla 用の JCE エディタ拡張に脆弱性があり、認証されていないユーザーが新しいエディタプロファイルを作成でき、その結果 PHP コードをアップロードして実行させられる可能性があります。",
"risk": "攻撃者がサーバー上で任意の PHP コードを実行できるため、サーバーが完全に制御される危険があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E2"
],
"applicability": [
{
"text": "Joomla Content Editor (JCE) 拡張のバージョン 1.0.0 から 2.9.99.4 までが影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json"
],
"evidenceIds": [
"E3",
"E1"
]
},
{
"text": "認証されていないユーザーがエディタプロファイルを作成できる環境でこの脆弱性が発生します。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json"
],
"evidenceIds": [
"E2",
"E1"
]
},
{
"text": "公式の対象表：joomlacontenteditor.net / Joomla Content Editor (JCE) extension for Joomla。影響ありとして記載：1.0.0-2.9.99.4。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Joomla Content Editor (JCE) extension for Joomla」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-48907",
"https://www.joomlacontenteditor.net/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907",
"https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites",
"https://www.joomlacontenteditor.net/support/changelog/editor",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48907"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-48907",
"https://www.joomlacontenteditor.net/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907",
"https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites",
"https://www.joomlacontenteditor.net/support/changelog/editor",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48907"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-48907",
"https://www.joomlacontenteditor.net/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907",
"https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites",
"https://www.joomlacontenteditor.net/support/changelog/editor",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48907"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。",
"公式タイトルにある名称は「Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla」、対象データの製品名は「Joomla Content Editor (JCE) extension for Joomla」です。同じ製品の別名かどうかは、この表記だけで決めず、開発元・製品識別子も添えて照合してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"label": "CVE：Joomla"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48907",
"label": "CVE公式レコード"
},
{
"url": "https://www.joomlacontenteditor.net/",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.joomlacontenteditor.net/support/changelog/editor",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48907",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"sourceField": "/containers/cna/title",
"excerpt": "Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5",
"language": null
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48907.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Joomla Content Editor (JCE) extension for Joomla\",\"vendor\":\"joomlacontenteditor.net\",\"versions\":[{\"status\":\"affected\",\"version\":\"1.0.0-2.9.99.4\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48907",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-48907\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-48907（Joomla Content Editor (JCE) extension for Joomla）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Joomla Content Editor (JCE) 拡張のバージョン 1.0.0 から 2.9.99.4 までが影響を受けます。\n・認証されていないユーザーがエディタプロファイルを作成できる環境でこの脆弱性が発生します。\n・公式の対象表：joomlacontenteditor.net / Joomla Content Editor (JCE) extension for Joomla。影響ありとして記載：1.0.0-2.9.99.4。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-48907",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:20.593Z",
"lastSuccess": "2026-10-23T03:23:20.593Z",
"sourceCheckedAt": "2026-10-23T02:43:49.234Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-20262",
"aliases": [],
"title": "Cisco Catalyst SD-WAN Manager：ファイルの不正な書き換え",
"summary": "Cisco Catalyst SD-WAN Manager の Web UI において、認証されたリモート攻撃者が細工した HTTP リクエストを送ることで、システム上の任意のファイルを作成または上書きできる脆弱性があります。攻撃者は有効な下位特権の単一タスクユーザーアカウントの認証情報を持っている必要があります。",
"risk": "攻撃者が任意のファイルを作成・上書きできるため、そのファイルを利用して root 権限に昇格させられる可能性があります。",
"product": "Cisco Catalyst SD-WAN Manager",
"category": "other",
"component": "package",
"severity": "medium",
"cvss": 6.5,
"cvssVersion": "3.1",
"cvssSource": "cisco",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"affected": [
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.12"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.3.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.099"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.0.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.1.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.302"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.303"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.097"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.098"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.0.1a"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.2.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.501_ES"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.929"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.31"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.32"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_925"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.1_927"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.2_937"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_928"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_929"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.1_930"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.0.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_937"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.1.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.0.01"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.0.02"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4.0.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.17"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.0.18.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.0.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.0.18.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.16"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1EFT2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.11"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.18"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.813"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.19"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.814"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.20"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.24"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.8.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.0.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.0.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1EFT2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.11"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.19"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.18"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.23"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.25"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.27"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.29"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.31"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.32"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.33"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.0.01"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3_LI_ Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.38"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.39"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.25"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.26"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.40"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.41"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.0.19"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.7.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.12"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.16"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.45"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.17"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.0.21"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.18"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.46"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.47"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.21"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.20"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.11"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.13"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.23"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.25"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.24"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.26"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.51"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.29"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.6.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.13.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.13.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.14.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.14.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.1.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.13"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.6_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.0.03"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.16.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.16.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.16"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.401"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.21"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.6.0.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.0.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4_Monthly_ES5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7_LI _Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.3_ LI _Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.501"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7.1_LI _Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.1.01"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.4_LI_ Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9.1"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20262",
"label": "CVE公式レコード"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20262",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-15T16:21:09.696Z",
"modifiedAt": "2026-06-17T03:55:46.594Z",
"fetchedAt": "2026-10-23T02:43:47.458Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.\r\n\r\nThis vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account.",
"sourceTitle": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "Cisco",
"product": "Cisco Catalyst SD-WAN Manager",
"versions": [
{
"version": "20.1.12",
"status": "affected"
},
{
"version": "19.2.1",
"status": "affected"
},
{
"version": "18.4.4",
"status": "affected"
},
{
"version": "18.4.5",
"status": "affected"
},
{
"version": "20.1.1.1",
"status": "affected"
},
{
"version": "20.1.1",
"status": "affected"
},
{
"version": "19.3.0",
"status": "affected"
},
{
"version": "19.2.2",
"status": "affected"
},
{
"version": "19.2.099",
"status": "affected"
},
{
"version": "18.3.6",
"status": "affected"
},
{
"version": "18.3.7",
"status": "affected"
},
{
"version": "19.2.0",
"status": "affected"
},
{
"version": "18.3.8",
"status": "affected"
},
{
"version": "19.0.0",
"status": "affected"
},
{
"version": "19.1.0",
"status": "affected"
},
{
"version": "18.4.302",
"status": "affected"
},
{
"version": "18.4.303",
"status": "affected"
},
{
"version": "19.2.097",
"status": "affected"
},
{
"version": "19.2.098",
"status": "affected"
},
{
"version": "17.2.10",
"status": "affected"
},
{
"version": "18.3.6.1",
"status": "affected"
},
{
"version": "19.0.1a",
"status": "affected"
},
{
"version": "18.2.0",
"status": "affected"
},
{
"version": "18.4.3",
"status": "affected"
},
{
"version": "18.4.1",
"status": "affected"
},
{
"version": "17.2.8",
"status": "affected"
},
{
"version": "18.3.3.1",
"status": "affected"
},
{
"version": "18.4.0",
"status": "affected"
},
{
"version": "18.3.1",
"status": "affected"
},
{
"version": "17.2.6",
"status": "affected"
},
{
"version": "17.2.9",
"status": "affected"
},
{
"version": "18.3.4",
"status": "affected"
},
{
"version": "17.2.5",
"status": "affected"
},
{
"version": "18.3.1.1",
"status": "affected"
},
{
"version": "18.3.5",
"status": "affected"
},
{
"version": "18.4.0.1",
"status": "affected"
},
{
"version": "18.3.3",
"status": "affected"
},
{
"version": "17.2.7",
"status": "affected"
},
{
"version": "17.2.4",
"status": "affected"
},
{
"version": "18.3.0",
"status": "affected"
},
{
"version": "19.2.3",
"status": "affected"
},
{
"version": "18.4.501_ES",
"status": "affected"
},
{
"version": "20.3.1",
"status": "affected"
},
{
"version": "20.1.2",
"status": "affected"
},
{
"version": "19.2.929",
"status": "affected"
},
{
"version": "19.2.31",
"status": "affected"
},
{
"version": "20.3.2",
"status": "affected"
},
{
"version": "19.2.32",
"status": "affected"
},
{
"version": "20.3.2_925",
"status": "affected"
},
{
"version": "20.3.2.1",
"status": "affected"
},
{
"version": "20.3.2.1_927",
"status": "affected"
},
{
"version": "18.4.6",
"status": "affected"
},
{
"version": "20.1.2_937",
"status": "affected"
},
{
"version": "20.4.1",
"status": "affected"
},
{
"version": "20.3.2_928",
"status": "affected"
},
{
"version": "20.3.2_929",
"status": "affected"
},
{
"version": "20.4.1.0.1",
"status": "affected"
},
{
"version": "20.3.2.1_930",
"status": "affected"
},
{
"version": "19.2.4",
"status": "affected"
},
{
"version": "20.5.0.1.1",
"status": "affected"
},
{
"version": "20.4.1.1",
"status": "affected"
},
{
"version": "20.3.3",
"status": "affected"
},
{
"version": "19.2.4.0.1",
"status": "affected"
},
{
"version": "20.3.2_937",
"status": "affected"
},
{
"version": "20.3.3.1",
"status": "affected"
},
{
"version": "20.5.1",
"status": "affected"
},
{
"version": "20.1.3",
"status": "affected"
},
{
"version": "20.3.3.0.4",
"status": "affected"
},
{
"version": "20.3.3.1.2",
"status": "affected"
},
{
"version": "20.3.3.1.1",
"status": "affected"
},
{
"version": "20.4.1.2",
"status": "affected"
},
{
"version": "20.3.3.0.2",
"status": "affected"
},
{
"version": "20.4.1.1.5",
"status": "affected"
},
{
"version": "20.4.1.0.01",
"status": "affected"
},
{
"version": "20.4.1.0.02",
"status": "affected"
},
{
"version": "20.3.3.1.7",
"status": "affected"
},
{
"version": "20.3.3.1.5",
"status": "affected"
},
{
"version": "20.5.1.0.1",
"status": "affected"
},
{
"version": "20.3.3.1.10",
"status": "affected"
},
{
"version": "20.3.3.0.8",
"status": "affected"
},
{
"version": "20.4.2",
"status": "affected"
},
{
"version": "20.4.2.0.1",
"status": "affected"
},
{
"version": "20.3.4",
"status": "affected"
},
{
"version": "20.3.3.0.14",
"status": "affected"
},
{
"version": "19.2.4.0.8",
"status": "affected"
},
{
"version": "19.2.4.0.9",
"status": "affected"
},
{
"version": "20.3.4.0.1",
"status": "affected"
},
{
"version": "20.3.2.0.5",
"status": "affected"
},
{
"version": "20.6.1",
"status": "affected"
},
{
"version": "20.5.1.0.2",
"status": "affected"
},
{
"version": "20.3.3.0.17",
"status": "affected"
},
{
"version": "20.6.1.1",
"status": "affected"
},
{
"version": "20.6.0.18.3",
"status": "affected"
},
{
"version": "20.3.2.0.6",
"status": "affected"
},
{
"version": "20.6.0.18.4",
"status": "affected"
},
{
"version": "20.4.2.0.2",
"status": "affected"
},
{
"version": "20.3.3.0.16",
"status": "affected"
},
{
"version": "20.3.4.0.5",
"status": "affected"
},
{
"version": "20.6.1.0.1",
"status": "affected"
},
{
"version": "20.3.4.0.6",
"status": "affected"
},
{
"version": "20.6.2",
"status": "affected"
},
{
"version": "20.7.1EFT2",
"status": "affected"
},
{
"version": "20.3.4.0.9",
"status": "affected"
},
{
"version": "20.3.4.0.11",
"status": "affected"
},
{
"version": "20.4.2.0.4",
"status": "affected"
},
{
"version": "20.3.3.0.18",
"status": "affected"
},
{
"version": "20.7.1",
"status": "affected"
},
{
"version": "20.6.2.1",
"status": "affected"
},
{
"version": "20.3.4.1",
"status": "affected"
},
{
"version": "20.5.1.1",
"status": "affected"
},
{
"version": "20.4.2.1",
"status": "affected"
},
{
"version": "20.4.2.1.1",
"status": "affected"
},
{
"version": "20.3.4.1.1",
"status": "affected"
},
{
"version": "20.3.813",
"status": "affected"
},
{
"version": "20.3.4.0.19",
"status": "affected"
},
{
"version": "20.4.2.2.1",
"status": "affected"
},
{
"version": "20.5.1.2",
"status": "affected"
},
{
"version": "20.3.4.2",
"status": "affected"
},
{
"version": "20.3.814",
"status": "affected"
},
{
"version": "20.4.2.2",
"status": "affected"
},
{
"version": "20.6.2.2",
"status": "affected"
},
{
"version": "20.3.4.2.1",
"status": "affected"
},
{
"version": "20.7.1.1",
"status": "affected"
},
{
"version": "20.3.4.1.2",
"status": "affected"
},
{
"version": "20.6.2.2.2",
"status": "affected"
},
{
"version": "20.3.4.0.20",
"status": "affected"
},
{
"version": "20.6.2.2.3",
"status": "affected"
},
{
"version": "20.4.2.2.2",
"status": "affected"
},
{
"version": "20.3.5",
"status": "affected"
},
{
"version": "20.6.2.0.4",
"status": "affected"
},
{
"version": "20.4.2.2.3",
"status": "affected"
},
{
"version": "20.3.4.0.24",
"status": "affected"
},
{
"version": "20.6.2.2.7",
"status": "affected"
},
{
"version": "20.6.3",
"status": "affected"
},
{
"version": "20.3.4.2.2",
"status": "affected"
},
{
"version": "20.4.2.2.4",
"status": "affected"
},
{
"version": "20.7.1.0.2",
"status": "affected"
},
{
"version": "20.8.1",
"status": "affected"
},
{
"version": "20.3.5.0.8",
"status": "affected"
},
{
"version": "20.3.5.0.9",
"status": "affected"
},
{
"version": "20.4.2.2.8",
"status": "affected"
},
{
"version": "20.3.5.0.7",
"status": "affected"
},
{
"version": "20.6.3.0.7",
"status": "affected"
},
{
"version": "20.6.3.0.5",
"status": "affected"
},
{
"version": "20.6.3.0.10",
"status": "affected"
},
{
"version": "20.6.3.0.2",
"status": "affected"
},
{
"version": "20.7.2",
"status": "affected"
},
{
"version": "20.9.1EFT2",
"status": "affected"
},
{
"version": "20.6.3.0.11",
"status": "affected"
},
{
"version": "20.6.3.1",
"status": "affected"
},
{
"version": "20.6.3.0.14",
"status": "affected"
},
{
"version": "20.6.4",
"status": "affected"
},
{
"version": "20.9.1",
"status": "affected"
},
{
"version": "20.6.3.0.19",
"status": "affected"
},
{
"version": "20.6.3.0.18",
"status": "affected"
},
{
"version": "20.3.6",
"status": "affected"
},
{
"version": "20.9.1.1",
"status": "affected"
},
{
"version": "20.6.3.0.23",
"status": "affected"
},
{
"version": "20.6.4.0.4",
"status": "affected"
},
{
"version": "20.6.3.0.25",
"status": "affected"
},
{
"version": "20.6.5",
"status": "affected"
},
{
"version": "20.6.3.0.27",
"status": "affected"
},
{
"version": "20.9.2",
"status": "affected"
},
{
"version": "20.9.2.1",
"status": "affected"
},
{
"version": "20.6.3.0.29",
"status": "affected"
},
{
"version": "20.6.3.0.31",
"status": "affected"
},
{
"version": "20.6.3.0.32",
"status": "affected"
},
{
"version": "20.10.1",
"status": "affected"
},
{
"version": "20.6.3.0.33",
"status": "affected"
},
{
"version": "20.9.2.0.01",
"status": "affected"
},
{
"version": "20.9.1_LI_Images",
"status": "affected"
},
{
"version": "20.10.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.2_LI_Images",
"status": "affected"
},
{
"version": "20.3.7",
"status": "affected"
},
{
"version": "20.9.3",
"status": "affected"
},
{
"version": "20.6.5.1",
"status": "affected"
},
{
"version": "20.11.1",
"status": "affected"
},
{
"version": "20.11.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.3_LI_ Images",
"status": "affected"
},
{
"version": "20.6.3.1.1",
"status": "affected"
},
{
"version": "20.9.3.0.2",
"status": "affected"
},
{
"version": "20.6.5.1.2",
"status": "affected"
},
{
"version": "20.9.3.0.3",
"status": "affected"
},
{
"version": "20.4.2.3",
"status": "affected"
},
{
"version": "20.6.3.2",
"status": "affected"
},
{
"version": "20.6.4.1",
"status": "affected"
},
{
"version": "20.6.3.0.38",
"status": "affected"
},
{
"version": "20.6.3.0.39",
"status": "affected"
},
{
"version": "20.3.5.1",
"status": "affected"
},
{
"version": "20.3.4.3",
"status": "affected"
},
{
"version": "20.9.3.1",
"status": "affected"
},
{
"version": "20.3.3.2",
"status": "affected"
},
{
"version": "20.6.5.2",
"status": "affected"
},
{
"version": "20.3.7.1",
"status": "affected"
},
{
"version": "20.10.1.1",
"status": "affected"
},
{
"version": "20.6.5.2.1",
"status": "affected"
},
{
"version": "20.3.4.0.25",
"status": "affected"
},
{
"version": "20.6.2.2.4",
"status": "affected"
},
{
"version": "20.6.1.2",
"status": "affected"
},
{
"version": "20.11.1.1",
"status": "affected"
},
{
"version": "20.9.3.0.5",
"status": "affected"
},
{
"version": "20.3.4.0.26",
"status": "affected"
},
{
"version": "20.6.5.1.3",
"status": "affected"
},
{
"version": "20.6.3.0.40",
"status": "affected"
},
{
"version": "20.1.3.1",
"status": "affected"
},
{
"version": "20.9.2.2",
"status": "affected"
},
{
"version": "20.6.5.2.3",
"status": "affected"
},
{
"version": "20.6.5.1.4",
"status": "affected"
},
{
"version": "20.6.5.3",
"status": "affected"
},
{
"version": "20.6.3.0.41",
"status": "affected"
},
{
"version": "20.9.3.0.7",
"status": "affected"
},
{
"version": "20.6.5.1.5",
"status": "affected"
},
{
"version": "20.9.3.0.4",
"status": "affected"
},
{
"version": "20.6.4.0.19",
"status": "affected"
},
{
"version": "20.6.5.1.6",
"status": "affected"
},
{
"version": "20.9.3.0.8",
"status": "affected"
},
{
"version": "20.6.3.3",
"status": "affected"
},
{
"version": "20.3.7.2",
"status": "affected"
},
{
"version": "20.6.5.4",
"status": "affected"
},
{
"version": "20.6.5.1.7",
"status": "affected"
},
{
"version": "20.9.3.0.12",
"status": "affected"
},
{
"version": "20.6.4.2",
"status": "affected"
},
{
"version": "20.6.5.5",
"status": "affected"
},
{
"version": "20.9.3.2",
"status": "affected"
},
{
"version": "20.11.1.2",
"status": "affected"
},
{
"version": "20.6.3.4",
"status": "affected"
},
{
"version": "20.10.1.2",
"status": "affected"
},
{
"version": "20.6.5.1.9",
"status": "affected"
},
{
"version": "20.9.3.0.16",
"status": "affected"
},
{
"version": "20.6.3.0.45",
"status": "affected"
},
{
"version": "20.6.5.1.10",
"status": "affected"
},
{
"version": "20.9.3.0.17",
"status": "affected"
},
{
"version": "20.6.5.2.4",
"status": "affected"
},
{
"version": "20.6.4.0.21",
"status": "affected"
},
{
"version": "20.9.3.0.18",
"status": "affected"
},
{
"version": "20.6.3.0.46",
"status": "affected"
},
{
"version": "20.6.3.0.47",
"status": "affected"
},
{
"version": "20.9.2.3",
"status": "affected"
},
{
"version": "20.9.3.2_LI_Images",
"status": "affected"
},
{
"version": "20.9.3.0.21",
"status": "affected"
},
{
"version": "20.9.3.0.20",
"status": "affected"
},
{
"version": "20.9.4_LI_Images",
"status": "affected"
},
{
"version": "20.9.4",
"status": "affected"
},
{
"version": "20.6.5.1.11",
"status": "affected"
},
{
"version": "20.12.1",
"status": "affected"
},
{
"version": "20.12.1_LI_Images",
"status": "affected"
},
{
"version": "20.6.5.1.13",
"status": "affected"
},
{
"version": "20.9.3.0.23",
"status": "affected"
},
{
"version": "20.6.5.2.8",
"status": "affected"
},
{
"version": "20.9.4.1",
"status": "affected"
},
{
"version": "20.9.4.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.3.0.25",
"status": "affected"
},
{
"version": "20.9.3.0.24",
"status": "affected"
},
{
"version": "20.6.5.1.14",
"status": "affected"
},
{
"version": "20.3.8",
"status": "affected"
},
{
"version": "20.6.6",
"status": "affected"
},
{
"version": "20.9.3.0.26",
"status": "affected"
},
{
"version": "20.6.3.0.51",
"status": "affected"
},
{
"version": "20.9.3.0.29",
"status": "affected"
},
{
"version": "20.12.2",
"status": "affected"
},
{
"version": "20.12.2_LI_Images",
"status": "affected"
},
{
"version": "20.6.6.0.1",
"status": "affected"
},
{
"version": "20.13.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.4.0.4",
"status": "affected"
},
{
"version": "20.13.1",
"status": "affected"
},
{
"version": "20.9.4.1.1",
"status": "affected"
},
{
"version": "20.9.5",
"status": "affected"
},
{
"version": "20.9.5_LI_Images",
"status": "affected"
},
{
"version": "20.12.3_LI_Images",
"status": "affected"
},
{
"version": "20.12.3",
"status": "affected"
},
{
"version": "20.9.4.1.3",
"status": "affected"
},
{
"version": "20.6.7",
"status": "affected"
},
{
"version": "20.9.5.1",
"status": "affected"
},
{
"version": "20.9.5.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.4.1.6",
"status": "affected"
},
{
"version": "20.14.1",
"status": "affected"
},
{
"version": "20.14.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.5.2",
"status": "affected"
},
{
"version": "20.9.5.2.1",
"status": "affected"
},
{
"version": "20.9.5.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.3.1",
"status": "affected"
},
{
"version": "20.12.4",
"status": "affected"
},
{
"version": "20.15.1_LI_Images",
"status": "affected"
},
{
"version": "20.15.1",
"status": "affected"
},
{
"version": "20.9.5.1.4",
"status": "affected"
},
{
"version": "20.9.5.2.7",
"status": "affected"
},
{
"version": "20.9.5.2.13",
"status": "affected"
},
{
"version": "20.9.6",
"status": "affected"
},
{
"version": "20.9.6_LI_Images",
"status": "affected"
},
{
"version": "20.9.5.2.14",
"status": "affected"
},
{
"version": "20.6.8",
"status": "affected"
},
{
"version": "20.12.4.0.03",
"status": "affected"
},
{
"version": "20.16.1",
"status": "affected"
},
{
"version": "20.16.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.4_LI_Images",
"status": "affected"
},
{
"version": "20.9.5.2.16",
"status": "affected"
},
{
"version": "20.12.4.0.4",
"status": "affected"
},
{
"version": "20.12.401",
"status": "affected"
},
{
"version": "20.9.5.3",
"status": "affected"
},
{
"version": "20.9.5.3_LI_Images",
"status": "affected"
},
{
"version": "20.12.4.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.4.1",
"status": "affected"
},
{
"version": "20.9.5.2.21",
"status": "affected"
},
{
"version": "20.9.6.0.3",
"status": "affected"
},
{
"version": "20.12.4.0.6",
"status": "affected"
},
{
"version": "20.15.2_LI_Images",
"status": "affected"
},
{
"version": "20.15.2",
"status": "affected"
},
{
"version": "20.12.4_Monthly_ES5",
"status": "affected"
},
{
"version": "20.12.5",
"status": "affected"
},
{
"version": "20.12.5_LI_Images",
"status": "affected"
},
{
"version": "20.9.7_LI _Images",
"status": "affected"
},
{
"version": "20.9.7",
"status": "affected"
},
{
"version": "20.15.3",
"status": "affected"
},
{
"version": "20.15.3_ LI _Images",
"status": "affected"
},
{
"version": "20.12.501",
"status": "affected"
},
{
"version": "20.12.5.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.1",
"status": "affected"
},
{
"version": "20.12.5.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.2",
"status": "affected"
},
{
"version": "20.15.3.1",
"status": "affected"
},
{
"version": "20.15.4_LI_Images",
"status": "affected"
},
{
"version": "20.15.4",
"status": "affected"
},
{
"version": "20.9.7.1_LI _Images",
"status": "affected"
},
{
"version": "20.9.7.1",
"status": "affected"
},
{
"version": "20.18.1",
"status": "affected"
},
{
"version": "20.18.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.6_LI_Images",
"status": "affected"
},
{
"version": "20.12.6",
"status": "affected"
},
{
"version": "20.12.5.1.01",
"status": "affected"
},
{
"version": "26.0.1",
"status": "affected"
},
{
"version": "20.9.8",
"status": "affected"
},
{
"version": "20.9.8_LI_Images",
"status": "affected"
},
{
"version": "20.18.2",
"status": "affected"
},
{
"version": "20.15.4.1_LI_Images",
"status": "affected"
},
{
"version": "20.15.4.1",
"status": "affected"
},
{
"version": "20.18.2_LI_Images",
"status": "affected"
},
{
"version": "26.1.1",
"status": "affected"
},
{
"version": "26.1.1_LI_Images",
"status": "affected"
},
{
"version": "20.18.2.1_LI_Images",
"status": "affected"
},
{
"version": "20.18.2.1",
"status": "affected"
},
{
"version": "20.15.4.2_LI_Images",
"status": "affected"
},
{
"version": "20.15.4.2",
"status": "affected"
},
{
"version": "20.12.6.1",
"status": "affected"
},
{
"version": "20.12.6.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.3",
"status": "affected"
},
{
"version": "20.12.5.3_LI_Images",
"status": "affected"
},
{
"version": "20.9.8.2_LI_Images",
"status": "affected"
},
{
"version": "20.9.8.2",
"status": "affected"
},
{
"version": "20.18.3",
"status": "affected"
},
{
"version": "20.18.3_LI_Images",
"status": "affected"
},
{
"version": "20.15.5",
"status": "affected"
},
{
"version": "20.15.5_LI_Images",
"status": "affected"
},
{
"version": "20.12.7",
"status": "affected"
},
{
"version": "20.12.7_LI_Images",
"status": "affected"
},
{
"version": "20.9.9",
"status": "affected"
},
{
"version": "20.9.9_LI_Images",
"status": "affected"
},
{
"version": "20.18.2.2",
"status": "affected"
},
{
"version": "20.18.2.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.4",
"status": "affected"
},
{
"version": "20.12.5.4_LI_ Images",
"status": "affected"
},
{
"version": "20.12.7.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.6.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.7.1",
"status": "affected"
},
{
"version": "20.15.5.1",
"status": "affected"
},
{
"version": "20.15.4.3",
"status": "affected"
},
{
"version": "20.15.4.3_LI_Images",
"status": "affected"
},
{
"version": "20.15.5.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.6.2",
"status": "affected"
},
{
"version": "20.15.5.2",
"status": "affected"
},
{
"version": "20.15.5.2_LI_Images",
"status": "affected"
},
{
"version": "26.1.1.1_LI_Images",
"status": "affected"
},
{
"version": "20.15.4.4",
"status": "affected"
},
{
"version": "20.15.4.4_LI_Images",
"status": "affected"
},
{
"version": "26.1.1.1",
"status": "affected"
},
{
"version": "20.9.9.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.9.1",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-20262",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"fetchedAt": "2026-10-23T02:43:47.458Z",
"publishedAt": "2026-06-15T16:21:09.696Z",
"modifiedAt": "2026-06-17T03:55:46.594Z",
"state": "published",
"provider": "cisco",
"title": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.\r\n\r\nThis vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Cisco",
"product": "Cisco Catalyst SD-WAN Manager",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unknown",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "20.1.12",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "19.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/2",
"version": "18.4.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/3",
"version": "18.4.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/4",
"version": "20.1.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/5",
"version": "20.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/6",
"version": "19.3.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/7",
"version": "19.2.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/8",
"version": "19.2.099",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/9",
"version": "18.3.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/10",
"version": "18.3.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/11",
"version": "19.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/12",
"version": "18.3.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/13",
"version": "19.0.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/14",
"version": "19.1.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/15",
"version": "18.4.302",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/16",
"version": "18.4.303",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/17",
"version": "19.2.097",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/18",
"version": "19.2.098",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/19",
"version": "17.2.10",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/20",
"version": "18.3.6.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/21",
"version": "19.0.1a",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/22",
"version": "18.2.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/23",
"version": "18.4.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/24",
"version": "18.4.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/25",
"version": "17.2.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/26",
"version": "18.3.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/27",
"version": "18.4.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/28",
"version": "18.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/29",
"version": "17.2.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/30",
"version": "17.2.9",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/31",
"version": "18.3.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/32",
"version": "17.2.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/33",
"version": "18.3.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/34",
"version": "18.3.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/35",
"version": "18.4.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/36",
"version": "18.3.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/37",
"version": "17.2.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/38",
"version": "17.2.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/39",
"version": "18.3.0",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/40",
"version": "19.2.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/41",
"version": "18.4.501_ES",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/42",
"version": "20.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/43",
"version": "20.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/44",
"version": "19.2.929",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/45",
"version": "19.2.31",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/46",
"version": "20.3.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/47",
"version": "19.2.32",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/48",
"version": "20.3.2_925",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/49",
"version": "20.3.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/50",
"version": "20.3.2.1_927",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/51",
"version": "18.4.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/52",
"version": "20.1.2_937",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/53",
"version": "20.4.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/54",
"version": "20.3.2_928",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/55",
"version": "20.3.2_929",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/56",
"version": "20.4.1.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/57",
"version": "20.3.2.1_930",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/58",
"version": "19.2.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/59",
"version": "20.5.0.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/60",
"version": "20.4.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/61",
"version": "20.3.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/62",
"version": "19.2.4.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/63",
"version": "20.3.2_937",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/64",
"version": "20.3.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/65",
"version": "20.5.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/66",
"version": "20.1.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/67",
"version": "20.3.3.0.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/68",
"version": "20.3.3.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/69",
"version": "20.3.3.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/70",
"version": "20.4.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/71",
"version": "20.3.3.0.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/72",
"version": "20.4.1.1.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/73",
"version": "20.4.1.0.01",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/74",
"version": "20.4.1.0.02",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/75",
"version": "20.3.3.1.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/76",
"version": "20.3.3.1.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/77",
"version": "20.5.1.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/78",
"version": "20.3.3.1.10",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/79",
"version": "20.3.3.0.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/80",
"version": "20.4.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/81",
"version": "20.4.2.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/82",
"version": "20.3.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/83",
"version": "20.3.3.0.14",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/84",
"version": "19.2.4.0.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/85",
"version": "19.2.4.0.9",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/86",
"version": "20.3.4.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/87",
"version": "20.3.2.0.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/88",
"version": "20.6.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/89",
"version": "20.5.1.0.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/90",
"version": "20.3.3.0.17",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/91",
"version": "20.6.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/92",
"version": "20.6.0.18.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/93",
"version": "20.3.2.0.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/94",
"version": "20.6.0.18.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/95",
"version": "20.4.2.0.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/96",
"version": "20.3.3.0.16",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/97",
"version": "20.3.4.0.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/98",
"version": "20.6.1.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/99",
"version": "20.3.4.0.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/100",
"version": "20.6.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/101",
"version": "20.7.1EFT2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/102",
"version": "20.3.4.0.9",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/103",
"version": "20.3.4.0.11",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/104",
"version": "20.4.2.0.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/105",
"version": "20.3.3.0.18",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/106",
"version": "20.7.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/107",
"version": "20.6.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/108",
"version": "20.3.4.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/109",
"version": "20.5.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/110",
"version": "20.4.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/111",
"version": "20.4.2.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/112",
"version": "20.3.4.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/113",
"version": "20.3.813",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/114",
"version": "20.3.4.0.19",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/115",
"version": "20.4.2.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/116",
"version": "20.5.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/117",
"version": "20.3.4.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/118",
"version": "20.3.814",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/119",
"version": "20.4.2.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/120",
"version": "20.6.2.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/121",
"version": "20.3.4.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/122",
"version": "20.7.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/123",
"version": "20.3.4.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/124",
"version": "20.6.2.2.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/125",
"version": "20.3.4.0.20",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/126",
"version": "20.6.2.2.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/127",
"version": "20.4.2.2.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/128",
"version": "20.3.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/129",
"version": "20.6.2.0.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/130",
"version": "20.4.2.2.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/131",
"version": "20.3.4.0.24",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/132",
"version": "20.6.2.2.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/133",
"version": "20.6.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/134",
"version": "20.3.4.2.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/135",
"version": "20.4.2.2.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/136",
"version": "20.7.1.0.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/137",
"version": "20.8.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/138",
"version": "20.3.5.0.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/139",
"version": "20.3.5.0.9",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/140",
"version": "20.4.2.2.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/141",
"version": "20.3.5.0.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/142",
"version": "20.6.3.0.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/143",
"version": "20.6.3.0.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/144",
"version": "20.6.3.0.10",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/145",
"version": "20.6.3.0.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/146",
"version": "20.7.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/147",
"version": "20.9.1EFT2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/148",
"version": "20.6.3.0.11",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/149",
"version": "20.6.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/150",
"version": "20.6.3.0.14",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/151",
"version": "20.6.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/152",
"version": "20.9.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/153",
"version": "20.6.3.0.19",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/154",
"version": "20.6.3.0.18",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/155",
"version": "20.3.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/156",
"version": "20.9.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/157",
"version": "20.6.3.0.23",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/158",
"version": "20.6.4.0.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/159",
"version": "20.6.3.0.25",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/160",
"version": "20.6.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/161",
"version": "20.6.3.0.27",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/162",
"version": "20.9.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/163",
"version": "20.9.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/164",
"version": "20.6.3.0.29",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/165",
"version": "20.6.3.0.31",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/166",
"version": "20.6.3.0.32",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/167",
"version": "20.10.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/168",
"version": "20.6.3.0.33",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/169",
"version": "20.9.2.0.01",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/170",
"version": "20.9.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/171",
"version": "20.10.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/172",
"version": "20.9.2_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/173",
"version": "20.3.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/174",
"version": "20.9.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/175",
"version": "20.6.5.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/176",
"version": "20.11.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/177",
"version": "20.11.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/178",
"version": "20.9.3_LI_ Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/179",
"version": "20.6.3.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/180",
"version": "20.9.3.0.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/181",
"version": "20.6.5.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/182",
"version": "20.9.3.0.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/183",
"version": "20.4.2.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/184",
"version": "20.6.3.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/185",
"version": "20.6.4.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/186",
"version": "20.6.3.0.38",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/187",
"version": "20.6.3.0.39",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/188",
"version": "20.3.5.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/189",
"version": "20.3.4.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/190",
"version": "20.9.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/191",
"version": "20.3.3.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/192",
"version": "20.6.5.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/193",
"version": "20.3.7.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/194",
"version": "20.10.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/195",
"version": "20.6.5.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/196",
"version": "20.3.4.0.25",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/197",
"version": "20.6.2.2.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/198",
"version": "20.6.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/199",
"version": "20.11.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/200",
"version": "20.9.3.0.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/201",
"version": "20.3.4.0.26",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/202",
"version": "20.6.5.1.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/203",
"version": "20.6.3.0.40",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/204",
"version": "20.1.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/205",
"version": "20.9.2.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/206",
"version": "20.6.5.2.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/207",
"version": "20.6.5.1.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/208",
"version": "20.6.5.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/209",
"version": "20.6.3.0.41",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/210",
"version": "20.9.3.0.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/211",
"version": "20.6.5.1.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/212",
"version": "20.9.3.0.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/213",
"version": "20.6.4.0.19",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/214",
"version": "20.6.5.1.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/215",
"version": "20.9.3.0.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/216",
"version": "20.6.3.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/217",
"version": "20.3.7.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/218",
"version": "20.6.5.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/219",
"version": "20.6.5.1.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/220",
"version": "20.9.3.0.12",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/221",
"version": "20.6.4.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/222",
"version": "20.6.5.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/223",
"version": "20.9.3.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/224",
"version": "20.11.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/225",
"version": "20.6.3.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/226",
"version": "20.10.1.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/227",
"version": "20.6.5.1.9",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/228",
"version": "20.9.3.0.16",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/229",
"version": "20.6.3.0.45",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/230",
"version": "20.6.5.1.10",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/231",
"version": "20.9.3.0.17",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/232",
"version": "20.6.5.2.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/233",
"version": "20.6.4.0.21",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/234",
"version": "20.9.3.0.18",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/235",
"version": "20.6.3.0.46",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/236",
"version": "20.6.3.0.47",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/237",
"version": "20.9.2.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/238",
"version": "20.9.3.2_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/239",
"version": "20.9.3.0.21",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/240",
"version": "20.9.3.0.20",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/241",
"version": "20.9.4_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/242",
"version": "20.9.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/243",
"version": "20.6.5.1.11",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/244",
"version": "20.12.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/245",
"version": "20.12.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/246",
"version": "20.6.5.1.13",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/247",
"version": "20.9.3.0.23",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/248",
"version": "20.6.5.2.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/249",
"version": "20.9.4.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/250",
"version": "20.9.4.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/251",
"version": "20.9.3.0.25",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/252",
"version": "20.9.3.0.24",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/253",
"version": "20.6.5.1.14",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/254",
"version": "20.3.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/255",
"version": "20.6.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/256",
"version": "20.9.3.0.26",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/257",
"version": "20.6.3.0.51",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/258",
"version": "20.9.3.0.29",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/259",
"version": "20.12.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/260",
"version": "20.12.2_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/261",
"version": "20.6.6.0.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/262",
"version": "20.13.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/263",
"version": "20.9.4.0.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/264",
"version": "20.13.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/265",
"version": "20.9.4.1.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/266",
"version": "20.9.5",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/267",
"version": "20.9.5_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/268",
"version": "20.12.3_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/269",
"version": "20.12.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/270",
"version": "20.9.4.1.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/271",
"version": "20.6.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/272",
"version": "20.9.5.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/273",
"version": "20.9.5.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/274",
"version": "20.9.4.1.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/275",
"version": "20.14.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/276",
"version": "20.14.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/277",
"version": "20.9.5.2",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/278",
"version": "20.9.5.2.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/279",
"version": "20.9.5.2_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/280",
"version": "20.12.3.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/281",
"version": "20.12.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/282",
"version": "20.15.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/283",
"version": "20.15.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/284",
"version": "20.9.5.1.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/285",
"version": "20.9.5.2.7",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/286",
"version": "20.9.5.2.13",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/287",
"version": "20.9.6",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/288",
"version": "20.9.6_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/289",
"version": "20.9.5.2.14",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/290",
"version": "20.6.8",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/291",
"version": "20.12.4.0.03",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/292",
"version": "20.16.1",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/293",
"version": "20.16.1_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/294",
"version": "20.12.4_LI_Images",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/295",
"version": "20.9.5.2.16",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/296",
"version": "20.12.4.0.4",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/297",
"version": "20.12.401",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/298",
"version": "20.9.5.3",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/299",
"version": "20.9.5.3_LI_Images",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [
{
"lang": "en",
"value": "In June 2026, the Cisco PSIRT became aware of limited exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.",
"sourcePath": "/containers/cna/exploits/0/value"
}
],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-22",
"lang": "en",
"description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"provider": "cisco",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ",
"label": "cisco-sa-sdwan-arbfw-c2rZvQ",
"tags": [],
"provider": "cisco",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20262",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2_925\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.1.2_937\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.01\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.7.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.10\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.11\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.14\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.9.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.27\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.31\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.32\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.33\",\"status\":\"affected\"},{\"version\":\"20.9.2.0.01\",\"status\":\"affected\"},{\"version\":\"20.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.10.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.6.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.38\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.39\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.40\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.41\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.14\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.51\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.6.0.1\",\"status\":\"affected\"},{\"version\":\"20.13.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.6\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.14.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.13\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.14\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.03\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.16.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.16\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.12.401\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.21\",\"status\":\"affected\"},{\"version\":\"20.9.6.0.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.15.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.4_Monthly_ES5\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.7_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3_ LI _Images\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"20.12.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.12.5.1.01\",\"status\":\"affected\"},{\"version\":\"26.0.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.9.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"},{\"version\":\"26.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.2\",\"status\":\"affected\"},{\"version\":\"20.12.6.1\",\"status\":\"affected\"},{\"version\":\"20.12.6.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.3\",\"status\":\"affected\"},{\"version\":\"20.12.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2\",\"status\":\"affected\"},{\"version\":\"20.18.3\",\"status\":\"affected\"},{\"version\":\"20.18.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5\",\"status\":\"affected\"},{\"version\":\"20.15.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7\",\"status\":\"affected\"},{\"version\":\"20.12.7_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9\",\"status\":\"affected\"},{\"version\":\"20.9.9_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.2\",\"status\":\"affected\"},{\"version\":\"20.18.2.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.4\",\"status\":\"affected\"},{\"version\":\"20.12.5.4_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.1\",\"status\":\"affected\"},{\"version\":\"20.15.5.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.3\",\"status\":\"affected\"},{\"version\":\"20.15.4.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6.2\",\"status\":\"affected\"},{\"version\":\"20.15.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.4\",\"status\":\"affected\"},{\"version\":\"20.15.4.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9.1\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.\r\n\r\nThis vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/exploits/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourcePath": "/containers/cna/exploits/0/value",
"text": "In June 2026, the Cisco PSIRT became aware of limited exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"description\":\"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"type\":\"cwe\",\"cweId\":\"CWE-22\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "bounded",
"truncatedFields": [
"/containers/cna/affected/0/versions"
],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-17T03:55:46.594Z",
"fetchedAt": "2026-10-23T02:43:47.458Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-15T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "Cisco Catalyst SD-WAN Managerにファイルの不正な書き換えに関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "意図しない場所にファイルを書き込まれる可能性があります。必要な権限や書き込み先などの成立条件は原文を確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:20.625Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "ac06b0cd3fc728cfe6e431acfa0256314d80d611204a90508fb21f641da63ce5",
"sourceModifiedAt": "2026-06-17T03:55:46.594Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Cisco Catalyst SD-WAN Manager の Web UI において、認証されたリモート攻撃者が細工した HTTP リクエストを送ることで、システム上の任意のファイルを作成または上書きできる脆弱性があります。攻撃者は有効な下位特権の単一タスクユーザーアカウントの認証情報を持っている必要があります。",
"risk": "攻撃者が任意のファイルを作成・上書きできるため、そのファイルを利用して root 権限に昇格させられる可能性があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "攻撃を実行するには、最低でも下位特権の単一タスクユーザーアカウントの有効な認証情報が必要です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "影響を受ける製品は Cisco Catalyst SD-WAN Manager（旧 SD-WAN vManage）の Web UI です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "脆弱性は、ファイルアップロード処理においてユーザー提供入力の検証が不適切であることが原因です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "攻撃者は細工した HTTP リクエストを対象 API エンドポイントに送信してこの脆弱性を悪用できます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "S4 に列挙されたすべてのバージョンが影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：17.2.4。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2_925。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.1.2_937。影響ありとして記載：20.4.1。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.3.3.1。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.01。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.0.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.6.1。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.3.3.0.17。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.3.4.0.5。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.6.2。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.4.2.0.4。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.7.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.5.1.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.6.2.2.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.3.5。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.4.2.2.3。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.6.3。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.7.1.0.2。影響ありとして記載：20.8.1。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.4.2.2.8。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.7。影響ありとして記載：20.6.3.0.5。影響ありとして記載：20.6.3.0.10。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.7.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.6.3.0.11。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.3.0.14。影響ありとして記載：20.6.4。影響ありとして記載：20.9.1。影響ありとして記載：20.6.3.0.19。影響ありとして記載：20.6.3.0.18。影響ありとして記載：20.3.6。影響ありとして記載：20.9.1.1。影響ありとして記載：20.6.3.0.23。影響ありとして記載：20.6.4.0.4。影響ありとして記載：20.6.3.0.25。影響ありとして記載：20.6.5。影響ありとして記載：20.6.3.0.27。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.6.3.0.29。影響ありとして記載：20.6.3.0.31。影響ありとして記載：20.6.3.0.32。影響ありとして記載：20.10.1。影響ありとして記載：20.6.3.0.33。影響ありとして記載：20.9.2.0.01。影響ありとして記載：20.9.1_LI_Images。影響ありとして記載：20.10.1_LI_Images。影響ありとして記載：20.9.2_LI_Images。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.6.5.1。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1_LI_Images。影響ありとして記載：20.9.3_LI_ Images。影響ありとして記載：20.6.3.1.1。影響ありとして記載：20.9.3.0.2。影響ありとして記載：20.6.5.1.2。影響ありとして記載：20.9.3.0.3。影響ありとして記載：20.4.2.3。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.3.0.38。影響ありとして記載：20.6.3.0.39。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.5.2.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.11.1.1。影響ありとして記載：20.9.3.0.5。影響ありとして記載：20.3.4.0.26。影響ありとして記載：20.6.5.1.3。影響ありとして記載：20.6.3.0.40。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.2.3。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.0.41。影響ありとして記載：20.9.3.0.7。影響ありとして記載：20.6.5.1.5。影響ありとして記載：20.9.3.0.4。影響ありとして記載：20.6.4.0.19。影響ありとして記載：20.6.5.1.6。影響ありとして記載：20.9.3.0.8。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.5.5。影響ありとして記載：20.9.3.2。影響ありとして記載：20.11.1.2。影響ありとして記載：20.6.3.4。影響ありとして記載：20.10.1.2。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.4.1_LI_Images。影響ありとして記載：20.9.3.0.25。影響ありとして記載：20.9.3.0.24。影響ありとして記載：20.6.5.1.14。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.9.3.0.26。影響ありとして記載：20.6.3.0.51。影響ありとして記載：20.9.3.0.29。影響ありとして記載：20.12.2。影響ありとして記載：20.12.2_LI_Images。影響ありとして記載：20.6.6.0.1。影響ありとして記載：20.13.1_LI_Images。影響ありとして記載：20.9.4.0.4。影響ありとして記載：20.13.1。影響ありとして記載：20.9.4.1.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5_LI_Images。影響ありとして記載：20.12.3_LI_Images。影響ありとして記載：20.12.3。影響ありとして記載：20.9.4.1.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.1_LI_Images。影響ありとして記載：20.9.4.1.6。影響ありとして記載：20.14.1。影響ありとして記載：20.14.1_LI_Images。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.5.2.1。影響ありとして記載：20.9.5.2_LI_Images。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1_LI_Images。影響ありとして記載：20.15.1。影響ありとして記載：20.9.5.1.4。影響ありとして記載：20.9.5.2.7。影響ありとして記載：20.9.5.2.13。影響ありとして記載：20.9.6。影響ありとして記載：20.9.6_LI_Images。影響ありとして記載：20.9.5.2.14。影響ありとして記載：20.6.8。影響ありとして記載：20.12.4.0.03。影響ありとして記載：20.16.1。影響ありとして記載：20.16.1_LI_Images。影響ありとして記載：20.12.4_LI_Images。影響ありとして記載：20.9.5.2.16。影響ありとして記載：20.12.4.0.4。影響ありとして記載：20.12.401。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.5.3_LI_Images。個別に記されていない版の影響は、原資料でも未確定です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Cisco Catalyst SD-WAN Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20262",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20262"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-20262",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20262"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20262",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20262"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。",
"長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。",
"公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20262",
"label": "CVE公式レコード"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20262",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.\r\n\r\nThis vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourceField": "/containers/cna/title",
"excerpt": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20262.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2_925\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.1.2_937\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.01\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.7.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.10\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.11\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.14\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.9.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.27\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.31\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.32\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.33\",\"status\":\"affected\"},{\"version\":\"20.9.2.0.01\",\"status\":\"affected\"},{\"version\":\"20.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.10.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.6.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.38\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.39\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.40\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.41\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.14\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.51\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.6.0.1\",\"status\":\"affected\"},{\"version\":\"20.13.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.6\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.14.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.13\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.14\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.03\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.16.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.16\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.12.401\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.21\",\"status\":\"affected\"},{\"version\":\"20.9.6.0.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.15.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.4_Monthly_ES5\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.7_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3_ LI _Images\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"20.12.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.12.5.1.01\",\"status\":\"affected\"},{\"version\":\"26.0.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.9.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"},{\"version\":\"26.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.2\",\"status\":\"affected\"},{\"version\":\"20.12.6.1\",\"status\":\"affected\"},{\"version\":\"20.12.6.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.3\",\"status\":\"affected\"},{\"version\":\"20.12.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2\",\"status\":\"affected\"},{\"version\":\"20.18.3\",\"status\":\"affected\"},{\"version\":\"20.18.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5\",\"status\":\"affected\"},{\"version\":\"20.15.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7\",\"status\":\"affected\"},{\"version\":\"20.12.7_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9\",\"status\":\"affected\"},{\"version\":\"20.9",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20262",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-20262\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-20262（Cisco Catalyst SD-WAN Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃を実行するには、最低でも下位特権の単一タスクユーザーアカウントの有効な認証情報が必要です。\n・影響を受ける製品は Cisco Catalyst SD-WAN Manager（旧 SD-WAN vManage）の Web UI です。\n・脆弱性は、ファイルアップロード処理においてユーザー提供入力の検証が不適切であることが原因です。\n・攻撃者は細工した HTTP リクエストを対象 API エンドポイントに送信してこの脆弱性を悪用できます。\n・S4 に列挙されたすべてのバージョンが影響を受けます。\n・公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：17.2.4。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2_925。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.1.2_937。影響ありとして記載：20.4.1。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.3.3.1。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.01。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.0.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.6.1。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.3.3.0.17。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.3.4.0.5。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.6.2。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.4.2.0.4。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.7.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.5.1.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.6.2.2.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.3.5。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.4.2.2.3。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.6.3。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.7.1.0.2。影響ありとして記載：20.8.1。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.4.2.2.8。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.7。影響ありとして記載：20.6.3.0.5。影響ありとして記載：20.6.3.0.10。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.7.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.6.3.0.11。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.3.0.14。影響ありとして記載：20.6.4。影響ありとして記載：20.9.1。影響ありとして記載：20.6.3.0.19。影響ありとして記載：20.6.3.0.18。影響ありとして記載：20.3.6。影響ありとして記載：20.9.1.1。影響ありとして記載：20.6.3.0.23。影響ありとして記載：20.6.4.0.4。影響ありとして記載：20.6.3.0.25。影響ありとして記載：20.6.5。影響ありとして記載：20.6.3.0.27。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.6.3.0.29。影響ありとして記載：20.6.3.0.31。影響ありとして記載：20.6.3.0.32。影響ありとして記載：20.10.1。影響ありとして記載：20.6.3.0.33。影響ありとして記載：20.9.2.0.01。影響ありとして記載：20.9.1_LI_Images。影響ありとして記載：20.10.1_LI_Images。影響ありとして記載：20.9.2_LI_Images。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.6.5.1。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1_LI_Images。影響ありとして記載：20.9.3_LI_ Images。影響ありとして記載：20.6.3.1.1。影響ありとして記載：20.9.3.0.2。影響ありとして記載：20.6.5.1.2。影響ありとして記載：20.9.3.0.3。影響ありとして記載：20.4.2.3。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.3.0.38。影響ありとして記載：20.6.3.0.39。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.5.2.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.11.1.1。影響ありとして記載：20.9.3.0.5。影響ありとして記載：20.3.4.0.26。影響ありとして記載：20.6.5.1.3。影響ありとして記載：20.6.3.0.40。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.2.3。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.0.41。影響ありとして記載：20.9.3.0.7。影響ありとして記載：20.6.5.1.5。影響ありとして記載：20.9.3.0.4。影響ありとして記載：20.6.4.0.19。影響ありとして記載：20.6.5.1.6。影響ありとして記載：20.9.3.0.8。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.5.5。影響ありとして記載：20.9.3.2。影響ありとして記載：20.11.1.2。影響ありとして記載：20.6.3.4。影響ありとして記載：20.10.1.2。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.4.1_LI_Images。影響ありとして記載：20.9.3.0.25。影響ありとして記載：20.9.3.0.24。影響ありとして記載：20.6.5.1.14。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.9.3.0.26。影響ありとして記載：20.6.3.0.51。影響ありとして記載：20.9.3.0.29。影響ありとして記載：20.12.2。影響ありとして記載：20.12.2_LI_Images。影響ありとして記載：20.6.6.0.1。影響ありとして記載：20.13.1_LI_Images。影響ありとして記載：20.9.4.0.4。影響ありとして記載：20.13.1。影響ありとして記載：20.9.4.1.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5_LI_Images。影響ありとして記載：20.12.3_LI_Images。影響ありとして記載：20.12.3。影響ありとして記載：20.9.4.1.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.1_LI_Images。影響ありとして記載：20.9.4.1.6。影響ありとして記載：20.14.1。影響ありとして記載：20.14.1_LI_Images。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.5.2.1。影響ありとして記載：20.9.5.2_LI_Images。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1_LI_Images。影響ありとして記載：20.15.1。影響ありとして記載：20.9.5.1.4。影響ありとして記載：20.9.5.2.7。影響ありとして記載：20.9.5.2.13。影響ありとして記載：20.9.6。影響ありとして記載：20.9.6_LI_Images。影響ありとして記載：20.9.5.2.14。影響ありとして記載：20.6.8。影響ありとして記載：20.12.4.0.03。影響ありとして記載：20.16.1。影響ありとして記載：20.16.1_LI_Images。影響ありとして記載：20.12.4_LI_Images。影響ありとして記載：20.9.5.2.16。影響ありとして記載：20.12.4.0.4。影響ありとして記載：20.12.401。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.5.3_LI_Images。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20262",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:20.625Z",
"lastSuccess": "2026-10-23T03:23:20.625Z",
"sourceCheckedAt": "2026-10-23T02:43:47.458Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-54420",
"aliases": [],
"title": "cPanel Plugin：脆弱性情報",
"summary": "LiteSpeed cPanel プラグインがバージョン 2.4.8 未満（LiteSpeed WHM PlugIn がバージョン 5.3.2.0 未満で配布されているもの）で、CloudLinux/CageFS 上の共有ホスティングサーバーで FTP またはウェブシェルを持つユーザーが作成したシンボリックリンクを正しく処理できず、2026 年 5 月に実際に悪用された。",
"risk": "この脆弱性は実際に野外で悪用されたことが確認されている。",
"product": "cPanel Plugin",
"category": "other",
"component": "package",
"severity": "high",
"cvss": 8.5,
"cvssVersion": "3.1",
"cvssSource": "mitre",
"cvssVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"affected": [
{
"product": "cPanel Plugin",
"range": ">= 2.3 / < 2.4.8（環境: Linux）"
}
],
"fixed": [],
"steps": [
"LiteSpeed WHM PlugIn をバージョン 5.3.2.0 以上にアップグレードする（これにより cPanel PlugIn がバージョン 2.4.8 以上になる）。",
"「CVE-2026-54420」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"label": "CVE：mitre"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54420",
"label": "CVE公式レコード"
},
{
"url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel",
"label": "CVE掲載の参考情報"
},
{
"url": "https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54420",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-14T03:23:12.863Z",
"modifiedAt": "2026-06-16T03:56:05.377Z",
"fetchedAt": "2026-10-23T02:43:49.476Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.",
"sourceTitle": "",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"defaultStatus": "unaffected",
"packageName": "WHM and cPanel PlugIn",
"platforms": [
"Linux"
],
"product": "cPanel Plugin",
"vendor": "LiteSpeed Technologies",
"versions": [
{
"lessThan": "2.4.8",
"status": "affected",
"version": "2.3",
"versionType": "custom"
}
]
}
],
"configurationNotes": "対象環境・機能: Linux。製品バージョンだけでなく、原文の利用条件を照合してください。",
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-54420",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"fetchedAt": "2026-10-23T02:43:49.476Z",
"publishedAt": "2026-06-14T03:23:12.863Z",
"modifiedAt": "2026-06-16T03:56:05.377Z",
"state": "published",
"provider": "mitre",
"title": "",
"descriptions": [
{
"lang": "en",
"value": "LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "LiteSpeed Technologies",
"product": "cPanel Plugin",
"sourcePath": "/containers/cna/affected/0",
"packageName": "WHM and cPanel PlugIn",
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "2.3",
"lessThan": "2.4.8",
"versionType": "custom",
"status": "affected"
}
]
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to the LiteSpeed WHM PlugIn v5.3.2.0 or higher (which includes the cPanel PlugIn v2.4.8).",
"sourcePath": "/containers/cna/solutions/0/value"
}
],
"workarounds": [
{
"lang": "en",
"value": "Disable the cPanel PlugIn for LiteSpeed",
"sourcePath": "/containers/cna/workarounds/0/value"
}
],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-61",
"lang": "en",
"description": "CWE-61 UNIX Symbolic Link (Symlink) Following",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"provider": "mitre",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel",
"label": "mitre",
"tags": [],
"provider": "mitre",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/",
"label": "mitre",
"tags": [],
"provider": "mitre",
"sourcePath": "/containers/cna/references/1"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-54420",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"defaultStatus\":\"unaffected\",\"packageName\":\"WHM and cPanel PlugIn\",\"platforms\":[\"Linux\"],\"product\":\"cPanel Plugin\",\"vendor\":\"LiteSpeed Technologies\",\"versions\":[{\"lessThan\":\"2.4.8\",\"status\":\"affected\",\"version\":\"2.3\",\"versionType\":\"custom\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourcePath": "/containers/cna/solutions/0/value",
"text": "Upgrade to the LiteSpeed WHM PlugIn v5.3.2.0 or higher (which includes the cPanel PlugIn v2.4.8).",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourcePath": "/containers/cna/workarounds/0/value",
"text": "Disable the cPanel PlugIn for LiteSpeed",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"cweId\":\"CWE-61\",\"description\":\"CWE-61 UNIX Symbolic Link (Symlink) Following\",\"lang\":\"en\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"attackComplexity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.5,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-16T03:56:05.377Z",
"fetchedAt": "2026-10-23T02:43:49.476Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-15T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "cPanel Pluginに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:20.753Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "7b95cead4a272b0809075bb0529add48522c714b9fbfc8456e703f33478a7efb",
"sourceModifiedAt": "2026-06-16T03:56:05.377Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "LiteSpeed cPanel プラグインがバージョン 2.4.8 未満（LiteSpeed WHM PlugIn がバージョン 5.3.2.0 未満で配布されているもの）で、CloudLinux/CageFS 上の共有ホスティングサーバーで FTP またはウェブシェルを持つユーザーが作成したシンボリックリンクを正しく処理できず、2026 年 5 月に実際に悪用された。",
"risk": "この脆弱性は実際に野外で悪用されたことが確認されている。",
"summaryEvidenceIds": [
"E1"
],
"riskEvidenceIds": [
"E2"
],
"applicability": [
{
"text": "対象プラットフォームは Linux である。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "LiteSpeed cPanel プラグインのバージョンが 2.4.8 未満であること。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "LiteSpeed WHM PlugIn のバージョンが 5.3.2.0 未満であること（このプラグインに cPanel PlugIn が含まれる）。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "サーバーが CloudLinux/CageFS 上で動作している共有ホスティング環境であること。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "FTP またはウェブシェルでアクセスできるユーザーがシンボリックリンクを提供できること。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "公式の対象表：LiteSpeed Technologies / cPanel Plugin。影響ありとして記載：2.3以上、2.4.8未満。対象の環境：Linux",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420"
],
"evidenceIds": [
"E2"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「cPanel Plugin」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-54420",
"https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel",
"https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54420"
]
}
],
"actions": [
{
"text": "LiteSpeed WHM PlugIn をバージョン 5.3.2.0 以上にアップグレードする（これにより cPanel PlugIn がバージョン 2.4.8 以上になる）。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "「CVE-2026-54420」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-54420",
"https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel",
"https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54420"
]
},
{
"text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-54420",
"https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel",
"https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54420"
]
}
],
"temporaryMitigations": [
{
"text": "LiteSpeed 用の cPanel PlugIn を無効化する。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E5"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-54420",
"https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel",
"https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54420"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"label": "CVE：mitre"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54420",
"label": "CVE公式レコード"
},
{
"url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel",
"label": "CVE掲載の参考情報"
},
{
"url": "https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54420",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-54420",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-54420\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"packageName\":\"WHM and cPanel PlugIn\",\"platforms\":[\"Linux\"],\"product\":\"cPanel Plugin\",\"vendor\":\"LiteSpeed Technologies\",\"versions\":[{\"lessThan\":\"2.4.8\",\"status\":\"affected\",\"version\":\"2.3\",\"versionType\":\"custom\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourceField": "/containers/cna/solutions/0/value",
"excerpt": "Upgrade to the LiteSpeed WHM PlugIn v5.3.2.0 or higher (which includes the cPanel PlugIn v2.4.8).",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54420.json",
"sourceField": "/containers/cna/workarounds/0/value",
"excerpt": "Disable the cPanel PlugIn for LiteSpeed",
"language": "en",
"representation": "source_excerpt"
}
],
"supportRequest": "件名：CVE-2026-54420（cPanel Plugin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象プラットフォームは Linux である。\n・LiteSpeed cPanel プラグインのバージョンが 2.4.8 未満であること。\n・LiteSpeed WHM PlugIn のバージョンが 5.3.2.0 未満であること（このプラグインに cPanel PlugIn が含まれる）。\n・サーバーが CloudLinux/CageFS 上で動作している共有ホスティング環境であること。\n・FTP またはウェブシェルでアクセスできるユーザーがシンボリックリンクを提供できること。\n・公式の対象表：LiteSpeed Technologies / cPanel Plugin。影響ありとして記載：2.3以上、2.4.8未満。対象の環境：Linux\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-54420",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:20.753Z",
"lastSuccess": "2026-10-23T03:23:20.753Z",
"sourceCheckedAt": "2026-10-23T02:43:49.476Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-35273",
"aliases": [],
"title": "PeopleSoft Enterprise PeopleTools：脆弱性情報",
"summary": "PeopleSoft Enterprise PeopleTools（コンポーネント: Updates Environment Management）のバージョン8.61および8.62に脆弱性があり、ネットワーク上でHTTP経由の認証なしの攻撃者がシステムを乗っ取ることが可能です。",
"risk": "この脆弱性が悪用されると、PeopleSoft Enterprise PeopleTools の制御が攻撃者に奪われます。",
"product": "PeopleSoft Enterprise PeopleTools",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 9.8,
"cvssVersion": "3.1",
"cvssSource": "oracle",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"affected": [
{
"product": "PeopleSoft Enterprise PeopleTools",
"range": "8.61"
},
{
"product": "PeopleSoft Enterprise PeopleTools",
"range": "8.62"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"label": "CVE：oracle"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35273",
"label": "CVE公式レコード"
},
{
"url": "https://www.oracle.com/security-alerts/alert-cve-2026-35273.html",
"label": "CISAが示す関連情報"
},
{
"url": "https://support.oracle.com/signin/",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35273",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-11T02:25:15.375Z",
"modifiedAt": "2026-08-04T03:56:12.603Z",
"fetchedAt": "2026-10-23T02:43:48.652Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"sourceTitle": "",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"product": "PeopleSoft Enterprise PeopleTools",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "8.61"
},
{
"status": "affected",
"version": "8.62"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-35273",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"fetchedAt": "2026-10-23T02:43:48.652Z",
"publishedAt": "2026-06-11T02:25:15.375Z",
"modifiedAt": "2026-08-04T03:56:12.603Z",
"state": "published",
"provider": "oracle",
"title": "",
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Oracle Corporation",
"product": "PeopleSoft Enterprise PeopleTools",
"sourcePath": "/containers/cna/affected/0",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "8.61",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "8.62",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "",
"lang": "en",
"description": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"provider": "oracle",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://www.oracle.com/security-alerts/alert-cve-2026-35273.html",
"label": "Oracle Advisory",
"tags": [
"vendor-advisory"
],
"provider": "oracle",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35273",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"product\":\"PeopleSoft Enterprise PeopleTools\",\"vendor\":\"Oracle Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"8.61\"},{\"status\":\"affected\",\"version\":\"8.62\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"description\":\"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\",\"lang\":\"en\",\"type\":\"text\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-08-04T03:56:12.603Z",
"fetchedAt": "2026-10-23T02:43:48.652Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-12T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "PeopleSoft Enterprise PeopleToolsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:20.871Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "9683d0a6062ef5841b0f751c9b79d35a6d58c8fe29f5a2226a1a9c0569c62bab",
"sourceModifiedAt": "2026-08-04T03:56:12.603Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "PeopleSoft Enterprise PeopleTools（コンポーネント: Updates Environment Management）のバージョン8.61および8.62に脆弱性があり、ネットワーク上でHTTP経由の認証なしの攻撃者がシステムを乗っ取ることが可能です。",
"risk": "この脆弱性が悪用されると、PeopleSoft Enterprise PeopleTools の制御が攻撃者に奪われます。",
"summaryEvidenceIds": [
"E1"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "影響を受ける製品は PeopleSoft Enterprise PeopleTools です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "影響を受けるバージョンは 8.61 と 8.62 です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "脆弱性は Updates Environment Management コンポーネントに存在します。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "攻撃者は認証されておらず、HTTP 経由でネットワークにアクセスできる必要があります。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "公式の対象表：Oracle Corporation / PeopleSoft Enterprise PeopleTools。影響ありとして記載：8.61。影響ありとして記載：8.62。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273"
],
"evidenceIds": [
"E3"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "「PeopleSoft Enterprise PeopleTools」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-35273",
"https://www.oracle.com/security-alerts/alert-cve-2026-35273.html",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273",
"https://support.oracle.com/signin/",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-35273"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E2"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-35273",
"https://www.oracle.com/security-alerts/alert-cve-2026-35273.html",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273",
"https://support.oracle.com/signin/",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-35273"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-35273",
"https://www.oracle.com/security-alerts/alert-cve-2026-35273.html",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273",
"https://support.oracle.com/signin/",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-35273"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"label": "CVE：oracle"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35273",
"label": "CVE公式レコード"
},
{
"url": "https://www.oracle.com/security-alerts/alert-cve-2026-35273.html",
"label": "CISAが示す関連情報"
},
{
"url": "https://support.oracle.com/signin/",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35273",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35273.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"product\":\"PeopleSoft Enterprise PeopleTools\",\"vendor\":\"Oracle Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"8.61\"},{\"status\":\"affected\",\"version\":\"8.62\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E3",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35273",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-35273\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-35273（PeopleSoft Enterprise PeopleTools）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受ける製品は PeopleSoft Enterprise PeopleTools です。\n・影響を受けるバージョンは 8.61 と 8.62 です。\n・脆弱性は Updates Environment Management コンポーネントに存在します。\n・攻撃者は認証されておらず、HTTP 経由でネットワークにアクセスできる必要があります。\n・公式の対象表：Oracle Corporation / PeopleSoft Enterprise PeopleTools。影響ありとして記載：8.61。影響ありとして記載：8.62。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-35273",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:20.871Z",
"lastSuccess": "2026-10-23T03:23:20.871Z",
"sourceCheckedAt": "2026-10-23T02:43:48.652Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-10520",
"aliases": [],
"title": "Sentry：コード実行",
"summary": "Ivanti Sentry の R10.5.2、R10.6.2、R10.7.1 より前のバージョンに OS コマンドインジェクションの脆弱性があり、リモートの認証されていないユーザーが root 権限でリモートコード実行を行える。",
"risk": "攻撃者がサーバー上で root 権限のコードを実行できる可能性がある。",
"product": "Sentry",
"category": "other",
"component": "package",
"severity": "critical",
"cvss": 10,
"cvssVersion": "3.1",
"cvssSource": "ivanti",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"affected": [
{
"product": "Sentry",
"range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"label": "CVE：ivanti"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10520",
"label": "CVE公式レコード"
},
{
"url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10520",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-09T14:10:21.581Z",
"modifiedAt": "2026-10-07T17:59:50.001Z",
"fetchedAt": "2026-10-23T02:43:41.925Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution",
"sourceTitle": "",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "ivanti",
"product": "Sentry",
"versions": [
{
"status": "unaffected",
"version": "R10.5.2"
},
{
"status": "unaffected",
"version": "R10.6.2"
},
{
"status": "unaffected",
"version": "R10.7.1"
}
],
"defaultStatus": "affected"
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-10520",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"fetchedAt": "2026-10-23T02:43:41.925Z",
"publishedAt": "2026-06-09T14:10:21.581Z",
"modifiedAt": "2026-10-07T17:59:50.001Z",
"state": "published",
"provider": "ivanti",
"title": "",
"descriptions": [
{
"lang": "en",
"value": "An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "ivanti",
"product": "Sentry",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "affected",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "R10.5.2",
"status": "unaffected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "R10.6.2",
"status": "unaffected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/2",
"version": "R10.7.1",
"status": "unaffected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-78",
"lang": "en",
"description": "CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"provider": "ivanti",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US",
"label": "ivanti",
"tags": [],
"provider": "ivanti",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523",
"label": "CISA-ADP",
"tags": [
"exploit"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"ivanti\",\"product\":\"Sentry\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"R10.5.2\"},{\"status\":\"unaffected\",\"version\":\"R10.6.2\"},{\"status\":\"unaffected\",\"version\":\"R10.7.1\"}],\"defaultStatus\":\"affected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"cweId\":\"CWE-78\",\"description\":\"CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":10,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-10-07T17:59:50.001Z",
"fetchedAt": "2026-10-23T02:43:41.925Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-11T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"sourceSummary": "Sentryにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:22.116Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "b4cd3afce68b4f46ff43186d67892bc27457f200ddfd245b59641e575e0d6ba8",
"sourceModifiedAt": "2026-10-07T17:59:50.001Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Ivanti Sentry の R10.5.2、R10.6.2、R10.7.1 より前のバージョンに OS コマンドインジェクションの脆弱性があり、リモートの認証されていないユーザーが root 権限でリモートコード実行を行える。",
"risk": "攻撃者がサーバー上で root 権限のコードを実行できる可能性がある。",
"summaryEvidenceIds": [
"E1"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "R10.5.2、R10.6.2、R10.7.1 はこの脆弱性の影響を受けない。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "それ以外のすべてのバージョンは影響を受ける。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "公式の対象表：ivanti / Sentry。影響なしとして記載：R10.5.2。影響なしとして記載：R10.6.2。影響なしとして記載：R10.7.1。個別に例外が記されていない版も、原資料では影響ありとされています。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520"
],
"evidenceIds": [
"E3"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "「Sentry」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-10520",
"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-10520"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json"
],
"evidenceIds": [
"E2"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-10520",
"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-10520"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-10520",
"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520",
"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"https://nvd.nist.gov/vuln/detail/CVE-2026-10520"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"label": "CVE：ivanti"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10520",
"label": "CVE公式レコード"
},
{
"url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10520",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10520.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"ivanti\",\"product\":\"Sentry\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"R10.5.2\"},{\"status\":\"unaffected\",\"version\":\"R10.6.2\"},{\"status\":\"unaffected\",\"version\":\"R10.7.1\"}],\"defaultStatus\":\"affected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E3",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-10520",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-10520\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-10520（Sentry）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・R10.5.2、R10.6.2、R10.7.1 はこの脆弱性の影響を受けない。\n・それ以外のすべてのバージョンは影響を受ける。\n・公式の対象表：ivanti / Sentry。影響なしとして記載：R10.5.2。影響なしとして記載：R10.6.2。影響なしとして記載：R10.7.1。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-10520",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:22.116Z",
"lastSuccess": "2026-10-23T03:23:22.116Z",
"sourceCheckedAt": "2026-10-23T02:43:41.925Z",
"errorCode": null
},
"glossary": [
{
"term": "任意のコード実行",
"meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
"sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
"kind": "general_definition"
}
]
}
},
{
"id": "CVE-2026-11645",
"aliases": [],
"title": "Chrome：コード実行",
"summary": "Google Chrome の V8 エンジンで、範囲外の読み書きが発生する欠陥があり、Chrome 149.0.7827.103 未満のバージョンでは、細工された HTML ページを通じてリモートの攻撃者がサンドボックス内で任意のコードを実行できる可能性があります。",
"risk": "攻撃者がサンドボックス内で任意のコードを実行できるため、ブラウザー上で不正な処理が行われる危険があります。",
"product": "Chrome",
"category": "other",
"component": "package",
"severity": "unknown",
"cvss": null,
"cvssVersion": null,
"cvssSource": "Chrome",
"cvssVector": null,
"affected": [
{
"product": "Chrome",
"range": ">= 149.0.7827.103 / < 149.0.7827.103"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"label": "CVE：Chrome"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11645",
"label": "CVE公式レコード"
},
{
"url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
"label": "CISAが示す関連情報"
},
{
"url": "https://issues.chromium.org/issues/506689381",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11645",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-08T23:27:31.298Z",
"modifiedAt": "2026-06-10T03:58:04.682Z",
"fetchedAt": "2026-10-23T02:43:45.805Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"sourceTitle": "",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "Google",
"product": "Chrome",
"versions": [
{
"version": "149.0.7827.103",
"status": "affected",
"lessThan": "149.0.7827.103",
"versionType": "custom"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-11645",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"fetchedAt": "2026-10-23T02:43:45.805Z",
"publishedAt": "2026-06-08T23:27:31.298Z",
"modifiedAt": "2026-06-10T03:58:04.682Z",
"state": "published",
"provider": "Chrome",
"title": "",
"descriptions": [
{
"lang": "en",
"value": "Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Google",
"product": "Chrome",
"sourcePath": "/containers/cna/affected/0",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "149.0.7827.103",
"lessThan": "149.0.7827.103",
"versionType": "custom",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "",
"lang": "en",
"description": "Out of bounds memory access",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
"label": "Chrome",
"tags": [],
"provider": "Chrome",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://issues.chromium.org/issues/506689381",
"label": "Chrome",
"tags": [],
"provider": "Chrome",
"sourcePath": "/containers/cna/references/1"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-11645",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"149.0.7827.103\",\"status\":\"affected\",\"lessThan\":\"149.0.7827.103\",\"versionType\":\"custom\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"description\":\"Out of bounds memory access\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"sourcePath": "/containers/adp/0/metrics/0/cvssV3_1",
"text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-06-10T03:58:04.682Z",
"fetchedAt": "2026-10-23T02:43:45.805Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-09T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"sourceSummary": "Chromeにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:37:53.461Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "5d87fa0ca9d0959a338f10ef5b18188cdf1f42a2cc1c9ae7108f04fd045a4830",
"sourceModifiedAt": "2026-06-10T03:58:04.682Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Google Chrome の V8 エンジンで、範囲外の読み書きが発生する欠陥があり、Chrome 149.0.7827.103 未満のバージョンでは、細工された HTML ページを通じてリモートの攻撃者がサンドボックス内で任意のコードを実行できる可能性があります。",
"risk": "攻撃者がサンドボックス内で任意のコードを実行できるため、ブラウザー上で不正な処理が行われる危険があります。",
"summaryEvidenceIds": [
"E1"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "Google Chrome のバージョン 149.0.7827.103 未満は影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "問題の種類は「Out of bounds memory access（範囲外メモリアクセス）」です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも149.0.7827.103で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "「Chrome」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-11645",
"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
"https://issues.chromium.org/issues/506689381",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645",
"https://nvd.nist.gov/vuln/detail/CVE-2026-11645"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json"
],
"evidenceIds": [
"E2"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-11645",
"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
"https://issues.chromium.org/issues/506689381",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645",
"https://nvd.nist.gov/vuln/detail/CVE-2026-11645"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json"
],
"evidenceIds": [
"E2"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-11645",
"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
"https://issues.chromium.org/issues/506689381",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645",
"https://nvd.nist.gov/vuln/detail/CVE-2026-11645"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"label": "CVE：Chrome"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11645",
"label": "CVE公式レコード"
},
{
"url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
"label": "CISAが示す関連情報"
},
{
"url": "https://issues.chromium.org/issues/506689381",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11645",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"149.0.7827.103\",\"status\":\"affected\",\"lessThan\":\"149.0.7827.103\",\"versionType\":\"custom\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11645.json",
"sourceField": "/containers/cna/problemTypes/0/descriptions/0",
"excerpt": "{\"lang\":\"en\",\"description\":\"Out of bounds memory access\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-11645",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-11645\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-11645（Chrome）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Google Chrome のバージョン 149.0.7827.103 未満は影響を受けます。\n・問題の種類は「Out of bounds memory access（範囲外メモリアクセス）」です。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも149.0.7827.103で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-11645",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:37:53.461Z",
"lastSuccess": "2026-10-23T03:37:53.461Z",
"sourceCheckedAt": "2026-10-23T02:43:45.805Z",
"errorCode": null
},
"glossary": [
{
"term": "任意のコード実行",
"meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
"sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
"kind": "general_definition"
}
]
}
},
{
"id": "CVE-2026-20245",
"aliases": [],
"title": "Cisco Catalyst SD-WAN Controller / Cisco Catalyst SD-WAN Manager：権限の奪取",
"summary": "Cisco Catalyst SD-WAN Controller（旧 SD-WAN vSmart）、Cisco Catalyst SD-WAN Manager（旧 SD-WAN vManage）、Cisco Catalyst SD-WAN Validator（旧 SD-WAN vBond）の CLI において、ユーザーが提供した入力の検証が不十分なため、認証済みのローカル攻撃者が細工したファイルをシステムにアップロードすると、任意のコマンドを root 権限で実行できる脆弱性があります。攻撃を実行するには、対象システムで netadmin 権限が必要であり、有効な認証情報が求められます。Cisco は、このバグの悪用によりエッジデバイスへの設定変更がプッシュされた事例が限定的に観測されたと報告しています。Cisco は、2026 年 5 月 14 日に公開された修正ソフトウェアへアップグレードし、エッジデバイスの設定を確認することを推奨しています。",
"risk": "攻撃者が root 権限でコマンドを実行できる可能性があります。",
"product": "Cisco Catalyst SD-WAN Controller / Cisco Catalyst SD-WAN Manager",
"category": "other",
"component": "package",
"severity": "high",
"cvss": 7.8,
"cvssVersion": "3.1",
"cvssSource": "cisco",
"cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"affected": [
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.6"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.7.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.3.0"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "17.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.2.0"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.4.6"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.1.0"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.929"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.8"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.4.303"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.7"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.097"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.0"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.099"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.6"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.0.0"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.4.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "17.2.8"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.8.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.32"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "17.2.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.4.0"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.4.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.1.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "17.2.10"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.098"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "17.2.6"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "17.2.9"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.31"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.0.1a"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.0"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "17.2.7"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.4.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.4.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "18.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.1.12"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "19.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.10.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.7"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.11.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.4.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.11.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.10.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.1.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.7.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.5.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.3.8"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.6"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.13.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.7"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.14.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.6"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.6.8"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.16.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.7"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.18.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.6"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.8"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.18.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "26.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.18.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.8.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.18.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.7"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.9"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.18.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.5.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.12.6.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.4.4"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "26.1.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.9.9.1"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "26.1.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.4.5"
},
{
"product": "Cisco Catalyst SD-WAN Controller",
"range": "20.15.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.12"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.3.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.099"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.0.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.1.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.302"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.303"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.097"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.098"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.0.1a"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.2.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "17.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.3.0"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.501_ES"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.929"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.31"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.32"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_925"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.1_927"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "18.4.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.2_937"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_928"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_929"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.1_930"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.0.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2_937"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.1.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.0.01"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.1.0.02"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.1.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "19.2.4.0.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.17"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.0.18.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.2.0.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.0.18.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.16"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1EFT2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.11"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.0.18"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.813"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.19"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.5.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.814"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.20"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.24"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.1.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.8.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.0.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.2.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.0.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.7.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1EFT2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.11"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.19"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.18"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.23"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.25"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.27"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.29"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.31"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.32"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.33"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.0.01"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3_LI_ Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.4.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.38"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.39"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.25"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.2.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.4.0.26"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.40"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.1.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.41"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.0.19"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.7.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.12"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.11.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.10.1.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.16"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.45"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.10"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.17"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.4.0.21"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.18"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.46"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.47"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.2.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.21"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.20"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.11"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.13"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.23"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.2.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.25"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.24"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.5.1.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.3.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.26"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.3.0.51"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.3.0.29"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.6.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.13.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.13.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.4.1.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.14.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.14.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.1.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.13"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.6_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.14"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.6.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.0.03"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.16.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.16.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.16"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.0.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.401"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.5.2.21"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.6.0.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4.0.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.4_Monthly_ES5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7_LI _Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.3_ LI _Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.501"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.3.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7.1_LI _Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.1.01"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.0.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.8.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.18.2.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.5.4_LI_ Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.7.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.3"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.3_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.12.6.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.2"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.5.2_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.4"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.15.4.4_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "26.1.1.1"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9.1_LI_Images"
},
{
"product": "Cisco Catalyst SD-WAN Manager",
"range": "20.9.9.1"
}
],
"fixed": [],
"steps": [
"2026 年 5 月 14 日に公開された修正ソフトウェアへアップグレードし、エッジデバイスの設定を確認してください。",
"「CVE-2026-20245」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20245",
"label": "CVE公式レコード"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
"label": "CISAが示す関連情報"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
"label": "CVE-2026-20182 or or CVE-2026-20127",
"tags": [],
"provider": "cisco",
"sourcePath": "/containers/cna/references/1"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20245",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Controller\",\"versions\":[{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.2\",\"status\":\"affected\"},{\"version\":\"20.18.2.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.3\",\"status\":\"affected\"},{\"version\":\"20.12.6.1\",\"status\":\"affected\"},{\"version\":\"20.9.8.2\",\"status\":\"affected\"},{\"version\":\"20.15.5\",\"status\":\"affected\"},{\"version\":\"20.18.3\",\"status\":\"affected\"},{\"version\":\"20.12.7\",\"status\":\"affected\"},{\"version\":\"20.9.9\",\"status\":\"affected\"},{\"version\":\"20.18.2.2\",\"status\":\"affected\"},{\"version\":\"20.12.5.4\",\"status\":\"affected\"},{\"version\":\"20.12.7.1\",\"status\":\"affected\"},{\"version\":\"20.15.5.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.3\",\"status\":\"affected\"},{\"version\":\"20.12.6.2\",\"status\":\"affected\"},{\"version\":\"20.15.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.4\",\"status\":\"affected\"},{\"version\":\"26.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.9.1\",\"status\":\"affected\"},{\"version\":\"26.1.1.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.5\",\"status\":\"affected\"},{\"version\":\"20.15.5.3\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2_925\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.1.2_937\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.01\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.7.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.10\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.11\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.14\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.9.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.27\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.31\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.32\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.33\",\"status\":\"affected\"},{\"version\":\"20.9.2.0.01\",\"status\":\"affected\"},{\"version\":\"20.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.10.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.6.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.38\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.39\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.40\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.41\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.14\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.51\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.6.0.1\",\"status\":\"affected\"},{\"version\":\"20.13.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.6\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.14.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.13\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.14\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.03\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.16.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.16\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.12.401\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.21\",\"status\":\"affected\"},{\"version\":\"20.9.6.0.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.15.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.4_Monthly_ES5\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.7_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3_ LI _Images\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"20.12.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.12.5.1.01\",\"status\":\"affected\"},{\"version\":\"26.0.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.9.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"},{\"version\":\"26.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.2\",\"status\":\"affected\"},{\"version\":\"20.12.6.1\",\"status\":\"affected\"},{\"version\":\"20.12.6.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.3\",\"status\":\"affected\"},{\"version\":\"20.12.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.8.2\",\"status\":\"affected\"},{\"version\":\"20.18.3\",\"status\":\"affected\"},{\"version\":\"20.18.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5\",\"status\":\"affected\"},{\"version\":\"20.15.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7\",\"status\":\"affected\"},{\"version\":\"20.12.7_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9\",\"status\":\"affected\"},{\"version\":\"20.9.9_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2.2\",\"status\":\"affected\"},{\"version\":\"20.18.2.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.4\",\"status\":\"affected\"},{\"version\":\"20.12.5.4_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.7.1\",\"status\":\"affected\"},{\"version\":\"20.15.5.1\",\"status\":\"affected\"},{\"version\":\"20.15.4.3\",\"status\":\"affected\"},{\"version\":\"20.15.4.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6.2\",\"status\":\"affected\"},{\"version\":\"20.15.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.4\",\"status\":\"affected\"},{\"version\":\"20.15.4.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"26.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.9.1\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by uploading a crafted file to the affected system. A successful exploit could allow the attacker to perform command injection attacks on an affected system and elevate their privileges as the root user.\r\nTo exploit this vulnerability, the attacker must have netadmin privileges on the affected system. This would require valid credentials or exploitation of or . Cisco is not aware of successful exploitation by other methods. Cisco has observed limited cases where the exploitation of this bug resulted in a configuration change pushed to edge devices.\r\nCisco recommends that customers upgrade to the fixed software that is documented in the that was published on May 14, 2026, and verify the configuration of the edge devices.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/exploits/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"sourcePath": "/containers/cna/exploits/0/value",
"text": "In June 2026, the Cisco PSIRT became aware of exploitation of this vulnerability.\r\n\r\nTo exploit this vulnerability, an attacker must have netadmin privileges on an affected system. This would require valid credentials or exploitation of or . Cisco is not aware of successful exploitation by other methods.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"description\":\"Improper Encoding or Escaping of Output\",\"type\":\"cwe\",\"cweId\":\"CWE-116\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "bounded",
"truncatedFields": [
"/containers/cna/affected/1/versions"
],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-07-21T16:17:48.759Z",
"fetchedAt": "2026-10-23T02:43:47.419Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-09T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"sourceSummary": "Cisco Catalyst SD-WAN Controller / Cisco Catalyst SD-WAN Managerに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:23.811Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "72e3c4ad431314b06afd7a7f2aa521d3caf93ffcad5c7f2afaedf6fc0ba75052",
"sourceModifiedAt": "2026-07-21T16:17:48.759Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Cisco Catalyst SD-WAN Controller（旧 SD-WAN vSmart）、Cisco Catalyst SD-WAN Manager（旧 SD-WAN vManage）、Cisco Catalyst SD-WAN Validator（旧 SD-WAN vBond）の CLI において、ユーザーが提供した入力の検証が不十分なため、認証済みのローカル攻撃者が細工したファイルをシステムにアップロードすると、任意のコマンドを root 権限で実行できる脆弱性があります。攻撃を実行するには、対象システムで netadmin 権限が必要であり、有効な認証情報が求められます。Cisco は、このバグの悪用によりエッジデバイスへの設定変更がプッシュされた事例が限定的に観測されたと報告しています。Cisco は、2026 年 5 月 14 日に公開された修正ソフトウェアへアップグレードし、エッジデバイスの設定を確認することを推奨しています。",
"risk": "攻撃者が root 権限でコマンドを実行できる可能性があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "対象製品は Cisco Catalyst SD-WAN Controller、Cisco Catalyst SD-WAN Manager、Cisco Catalyst SD-WAN Validator のいずれかです。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "攻撃者は対象システム上で netadmin 権限を持っている必要があります。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "netadmin 権限を取得するには有効な認証情報が必要です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "攻撃は細工したファイルをアップロードすることで実行されます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Controller。影響ありとして記載：20.6.4。影響ありとして記載：20.9.2。影響ありとして記載：20.3.6。影響ありとして記載：20.7.2。影響ありとして記載：20.7.1。影響ありとして記載：20.5.1。影響ありとして記載：20.6.2。影響ありとして記載：19.3.0。影響ありとして記載：20.6.1。影響ありとして記載：17.2.4。影響ありとして記載：18.2.0。影響ありとして記載：18.4.6。影響ありとして記載：19.1.0。影響ありとして記載：19.2.4。影響ありとして記載：19.2.929。影響ありとして記載：18.3.8。影響ありとして記載：18.4.303。影響ありとして記載：18.3.7。影響ありとして記載：18.4.1。影響ありとして記載：19.2.097。影響ありとして記載：19.2.0。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：20.4.2。影響ありとして記載：19.0.0。影響ありとして記載：20.9.1。影響ありとして記載：20.3.5。影響ありとして記載：20.3.1。影響ありとして記載：18.3.5。影響ありとして記載：20.6.3。影響ありとして記載：18.4.3。影響ありとして記載：18.4.4。影響ありとして記載：18.3.3。影響ありとして記載：17.2.8。影響ありとして記載：20.8.1。影響ありとして記載：19.2.32。影響ありとして記載：19.2.2。影響ありとして記載：17.2.5。影響ありとして記載：18.4.0。影響ありとして記載：20.4.1.1。影響ありとして記載：20.1.3。影響ありとして記載：20.1.2。影響ありとして記載：17.2.10。影響ありとして記載：19.2.098。影響ありとして記載：20.1.1。影響ありとして記載：17.2.6。影響ありとして記載：19.2.1。影響ありとして記載：18.3.4。影響ありとして記載：20.4.1。影響ありとして記載：17.2.9。影響ありとして記載：19.2.31。影響ありとして記載：19.0.1a。影響ありとして記載：18.3.0。影響ありとして記載：17.2.7。影響ありとして記載：18.4.5。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.2。影響ありとして記載：18.3.1。影響ありとして記載：20.1.12。影響ありとして記載：19.2.3。影響ありとして記載：20.10.1。影響ありとして記載：20.6.5。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.11.1。影響ありとして記載：20.6.3.2。影響ありとして記載：20.4.2.3。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.6.4.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.11.1.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.1.2。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.4。影響ありとして記載：20.12.1。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.12.2。影響ありとして記載：20.13.1。影響ありとして記載：20.9.5。影響ありとして記載：20.12.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.14.1。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1。影響ありとして記載：20.9.6。影響ありとして記載：20.6.8。影響ありとして記載：20.16.1。影響ありとして記載：20.9.5.3。影響ありとして記載：20.12.4.1。影響ありとして記載：20.15.2。影響ありとして記載：20.12.5。影響ありとして記載：20.9.7。影響ありとして記載：20.15.3。影響ありとして記載：20.12.5.1。影響ありとして記載：20.12.5.2。影響ありとして記載：20.15.4。影響ありとして記載：20.9.7.1。影響ありとして記載：20.18.1。影響ありとして記載：20.12.6。影響ありとして記載：20.9.8。影響ありとして記載：20.15.4.1。影響ありとして記載：20.18.2。影響ありとして記載：26.1.1。影響ありとして記載：20.15.4.2。影響ありとして記載：20.18.2.1。影響ありとして記載：20.12.5.3。影響ありとして記載：20.12.6.1。影響ありとして記載：20.9.8.2。影響ありとして記載：20.15.5。影響ありとして記載：20.18.3。影響ありとして記載：20.12.7。影響ありとして記載：20.9.9。影響ありとして記載：20.18.2.2。影響ありとして記載：20.12.5.4。影響ありとして記載：20.12.7.1。影響ありとして記載：20.15.5.1。影響ありとして記載：20.15.4.3。影響ありとして記載：20.12.6.2。影響ありとして記載：20.15.5.2。影響ありとして記載：20.15.4.4。影響ありとして記載：26.1.1.1。影響ありとして記載：20.9.9.1。影響ありとして記載：26.1.1.2。影響ありとして記載：20.15.4.5。影響ありとして記載：20.15.5.3。個別に記されていない版の影響は、原資料でも未確定です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：17.2.4。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2_925。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.1.2_937。影響ありとして記載：20.4.1。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.3.3.1。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.01。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.0.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.6.1。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.3.3.0.17。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.3.4.0.5。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.6.2。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.4.2.0.4。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.7.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.5.1.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.6.2.2.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.3.5。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.4.2.2.3。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.6.3。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.7.1.0.2。影響ありとして記載：20.8.1。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.4.2.2.8。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.7。影響ありとして記載：20.6.3.0.5。影響ありとして記載：20.6.3.0.10。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.7.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.6.3.0.11。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.3.0.14。影響ありとして記載：20.6.4。影響ありとして記載：20.9.1。影響ありとして記載：20.6.3.0.19。影響ありとして記載：20.6.3.0.18。影響ありとして記載：20.3.6。影響ありとして記載：20.9.1.1。影響ありとして記載：20.6.3.0.23。影響ありとして記載：20.6.4.0.4。影響ありとして記載：20.6.3.0.25。影響ありとして記載：20.6.5。影響ありとして記載：20.6.3.0.27。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.6.3.0.29。影響ありとして記載：20.6.3.0.31。影響ありとして記載：20.6.3.0.32。影響ありとして記載：20.10.1。影響ありとして記載：20.6.3.0.33。影響ありとして記載：20.9.2.0.01。影響ありとして記載：20.9.1_LI_Images。影響ありとして記載：20.10.1_LI_Images。影響ありとして記載：20.9.2_LI_Images。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.6.5.1。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1_LI_Images。影響ありとして記載：20.9.3_LI_ Images。影響ありとして記載：20.6.3.1.1。影響ありとして記載：20.9.3.0.2。影響ありとして記載：20.6.5.1.2。影響ありとして記載：20.9.3.0.3。影響ありとして記載：20.4.2.3。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.3.0.38。影響ありとして記載：20.6.3.0.39。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.5.2.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.11.1.1。影響ありとして記載：20.9.3.0.5。影響ありとして記載：20.3.4.0.26。影響ありとして記載：20.6.5.1.3。影響ありとして記載：20.6.3.0.40。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.2.3。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.0.41。影響ありとして記載：20.9.3.0.7。影響ありとして記載：20.6.5.1.5。影響ありとして記載：20.9.3.0.4。影響ありとして記載：20.6.4.0.19。影響ありとして記載：20.6.5.1.6。影響ありとして記載：20.9.3.0.8。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.5.5。影響ありとして記載：20.9.3.2。影響ありとして記載：20.11.1.2。影響ありとして記載：20.6.3.4。影響ありとして記載：20.10.1.2。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.4.1_LI_Images。影響ありとして記載：20.9.3.0.25。影響ありとして記載：20.9.3.0.24。影響ありとして記載：20.6.5.1.14。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.9.3.0.26。影響ありとして記載：20.6.3.0.51。影響ありとして記載：20.9.3.0.29。影響ありとして記載：20.12.2。影響ありとして記載：20.12.2_LI_Images。影響ありとして記載：20.6.6.0.1。影響ありとして記載：20.13.1_LI_Images。影響ありとして記載：20.9.4.0.4。影響ありとして記載：20.13.1。影響ありとして記載：20.9.4.1.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5_LI_Images。影響ありとして記載：20.12.3_LI_Images。影響ありとして記載：20.12.3。影響ありとして記載：20.9.4.1.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.1_LI_Images。影響ありとして記載：20.9.4.1.6。影響ありとして記載：20.14.1。影響ありとして記載：20.14.1_LI_Images。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.5.2.1。影響ありとして記載：20.9.5.2_LI_Images。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1_LI_Images。影響ありとして記載：20.15.1。影響ありとして記載：20.9.5.1.4。影響ありとして記載：20.9.5.2.7。影響ありとして記載：20.9.5.2.13。影響ありとして記載：20.9.6。影響ありとして記載：20.9.6_LI_Images。影響ありとして記載：20.9.5.2.14。影響ありとして記載：20.6.8。影響ありとして記載：20.12.4.0.03。影響ありとして記載：20.16.1。影響ありとして記載：20.16.1_LI_Images。影響ありとして記載：20.12.4_LI_Images。影響ありとして記載：20.9.5.2.16。影響ありとして記載：20.12.4.0.4。影響ありとして記載：20.12.401。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.5.3_LI_Images。個別に記されていない版の影響は、原資料でも未確定です。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245"
],
"evidenceIds": [
"E5"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Cisco Catalyst SD-WAN Controller / Cisco Catalyst SD-WAN Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20245",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20245"
]
}
],
"actions": [
{
"text": "2026 年 5 月 14 日に公開された修正ソフトウェアへアップグレードし、エッジデバイスの設定を確認してください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "「CVE-2026-20245」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-20245",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20245"
]
},
{
"text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20245",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20245"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-20245",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20245"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-20245",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245",
"https://nvd.nist.gov/vuln/detail/CVE-2026-20245"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。",
"長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。",
"公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20245.json",
"label": "CVE：cisco"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20245",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20245",
"label": "CVE公式レコード"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
"label": "CISAが示す関連情報"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
"label": "CVE-2026-20182 or = 4.35.0 / <= 4.35（環境: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)）"
},
{
"product": "EOS",
"range": ">= 4.34.0 / <= 4.34（環境: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)）"
},
{
"product": "EOS",
"range": ">= 4.33.0 / <= 4.33（環境: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)）"
},
{
"product": "EOS",
"range": ">= 4.32.0 / <= 4.32（環境: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)）"
},
{
"product": "EOS",
"range": ">= 4.31.0 / <= 4.31（環境: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)）"
},
{
"product": "EOS",
"range": "* / <= 4.30（環境: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)）"
},
{
"product": "EOS",
"range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。（環境: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)）"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"label": "CVE：Arista"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7473",
"label": "CVE公式レコード"
},
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7473",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-05T16:22:47.989Z",
"modifiedAt": "2026-10-07T18:27:31.678Z",
"fetchedAt": "2026-10-23T02:43:50.627Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic.\n\n\n\nThis issue has been reported as being exploited in the wild.",
"sourceTitle": "Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "Arista Networks",
"product": "EOS",
"platforms": [
"7020R Series",
"7280R/R2 Series",
"7500R/R2 Series",
"7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)",
"7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)",
"7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)"
],
"versions": [
{
"status": "affected",
"version": "4.36.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.35.0",
"lessThanOrEqual": "4.35",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.34.0",
"lessThanOrEqual": "4.34",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.33.0",
"lessThanOrEqual": "4.33",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.32.0",
"lessThanOrEqual": "4.32",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.31.0",
"lessThanOrEqual": "4.31",
"versionType": "custom"
},
{
"status": "affected",
"version": "*",
"lessThanOrEqual": "4.30",
"versionType": "custom"
}
],
"defaultStatus": "affected"
}
],
"configurationNotes": "対象環境・機能: 7020R Series / 7280R/R2 Series / 7500R/R2 Series / 7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6) / 7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)。製品バージョンだけでなく、原文の利用条件を照合してください。",
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-7473",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"fetchedAt": "2026-10-23T02:43:50.627Z",
"publishedAt": "2026-06-05T16:22:47.989Z",
"modifiedAt": "2026-10-07T18:27:31.678Z",
"state": "published",
"provider": "Arista",
"title": "Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass",
"descriptions": [
{
"lang": "en",
"value": "On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic.\n\n\n\nThis issue has been reported as being exploited in the wild.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "Arista Networks",
"product": "EOS",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "affected",
"platforms": [
"7020R Series",
"7280R/R2 Series",
"7500R/R2 Series",
"7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)",
"7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)",
"7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)"
],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "4.36.0",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "4.35.0",
"lessThanOrEqual": "4.35",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/2",
"version": "4.34.0",
"lessThanOrEqual": "4.34",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/3",
"version": "4.33.0",
"lessThanOrEqual": "4.33",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/4",
"version": "4.32.0",
"lessThanOrEqual": "4.32",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/5",
"version": "4.31.0",
"lessThanOrEqual": "4.31",
"versionType": "custom",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/6",
"version": "*",
"lessThanOrEqual": "4.30",
"versionType": "custom",
"status": "affected"
}
]
}
],
"solutions": [
{
"lang": "en",
"value": "No software upgrade path is planned to address this issue due to the risk of breaking existing configuration on deployments. The recommended resolution of this issue is to follow the appropriate mitigation instructions detailed in the workaround block.",
"sourcePath": "/containers/cna/solutions/0/value"
}
],
"workarounds": [
{
"lang": "en",
"value": "There are two broad approaches to mitigate this issue - (1) applying ACLs on upstream devices or (2) applying ACLs on the devices where the unexpected decapsulation is happening. In both cases, the idea is to either selectively allow only legitimate tunnel traffic or to selectively block malicious tunnel traffic. For example, if a network is configured to forward VXLAN traffic, but GRE traffic is being unexpectedly forwarded, then ACLs can be used to either selectively allow just VXLAN traffic or selectively block GRE traffic. More details about using the ACL feature can be found in the Arista User Manual https://www.arista.com/en/um-eos/eos-acls-and-route-maps#xx1150869 .\n\n\n\nA note of caution, the following ACL-based mitigation recommendations assume that the tunnel IP is dedicated solely to receiving the configured tunnel protocol traffic. When adapting these rules for your environment, it is important to explicitly permit any additional protocol traffic—such as BGP or SSH—if that IP serves multiple functions. To maintain connectivity, ensure these permit statements are sequenced before any deny statements directed at the decapsulation IP.\n\n\n\nThe following configurations align with the recommendations outlined in the Arista EOS Hardening Guide https://arista.my.site.com/AristaCommunity/s/article/arista-eos-hardening-guide#Comm_Kna_ka0Uw00000097VJIAY_71 .",
"sourcePath": "/containers/cna/workarounds/0/value"
},
{
"lang": "en",
"value": "Approach 1 - Applying ACL on Upstream Switches\n\nOn upstream devices, applying ACLs to allow specific tunneled traffic is straightforward. ACLs can be applied that match on tunnel destination IP, the IP next protocol field, and (optionally) UDP destination port to selectively allow or block specific tunnel protocols.\n\n\n\nExample ACLs for Arista EOS follows.\n\nACL to permit VXLANv4 Only\n\nThis IPv4 ACL matches on VXLAN packets as follows:\n(a) IP next protocol = UDP (17)\n(b) IP DIP = VXLAN VTEP IP\n(c) UDP destination port = VXLAN UDP Port (4789)\n\n\n\nIt allows VXLAN packets and drops all other packets to the VXLAN Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit udp any host eq 4789\n 2 deny ip any host \n 3 permit ip any any\n\n\n \n\nACL to permit GREv4 Only\n\nThis IPv4 ACL matches on GRE packets as follows:\n(a) IP next protocol = GRE (47)\n(b) IP DIP = GRE Tunnel Destination IP\n\n\n\nIt allows GRE packets and drops all other packets to the GRE Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit gre any host \n 2 deny ip any host \n 3 permit any any\n\n\n \n\nACL to permit IP-in-IPv4 Only\n\nThis IPv4 ACL matches on IP-in-IPv4 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IP DIP = IP-in-IP Decap IP\n\n\n\nIt allows IP-in-IPv4 packets and drops all other packets to the IP-in-IPv4 Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit 4 any host \n 2 permit 41 any host \n 3 deny ip any host \n 4 permit any any\n\n\n \n\nACL to Permit IP-in-IPv6 Only\n\nThis IPv6 ACL matches on IP-in-IPv6 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IP DIP = IP-in-IP Decap IP\n\n\n\nIt allows IP-in-IPv6 packets and drops all other packets to the IP-in-IPv6 Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit 4 any host \n 2 permit 41 any host \n 3 deny ipv6 any host \n 4 permit ipv6 any any\n\n\n \n\nACL to permit GUEv4 Only\n\nThis IPv4 ACL matches on GUE packets as follows:\n(a) IP next protocol = UDP (17)\n(b) IP DIP = GUE Decap IP\n(c) UDP destination port = UDP port configured per payload\n (IP = Y or MPLS = Z)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit udp any host eq Y\n 2 permit udp any host eq Z\n 3 deny ip any host \n 4 permit ip any any\n\n\n \n\nACL to Permit GUEv6 Only\n\nThis IPv6 ACL matches on GUE packets as follows:\n(a) IP next protocol = UDP (17)\n(b) IP DIP = GUE Decap IP\n(c) UDP destination port = UDP port configured per payload\n (IP = Y or MPLS = Z)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit udp any host eq Y\n 2 permit udp any host eq Z\n 3 deny ipv6 any host \n 4 permit ipv6 any any",
"sourcePath": "/containers/cna/workarounds/1/value"
},
{
"lang": "en",
"value": "Approach 2 - Applying ACL on Decapsulation Switches\n\nApplying ACLs on the decapsulation device is more complicated. It requires the use of MAC ACLs on 7020R Series, 7280R/R2 Series, and 7500R/R2 Series systems and IP ACLs on 7280R3 Series, 7500R3 Series, and 7800R3 Series systems. In both cases, a TCAM profile update is also required. Note that TCAM profile update is a disruptive operation that could impact traffic forwarding. More information can be found in User-defined TCAM Profiles https://www.arista.com/en/support/toi/eos-4-26-0f/14755-user-defined-tcam-profiles .\n\n7020R Series, 7280R/R2 Series, and 7500R/R2 Series\n\nMitigation involves using MAC ACLs to allow specific expected protocol packets and block all other traffic to the configured decap IPs. The suggested MAC ACLs use User Defined Fields (UDFs) to match on specific fields in the packet headers. This requires a TCAM profile update to include the following UDF qualifiers:\n\n * For IPv4 tunnels, 2 16b and 1 32b UDF qualifiers need to be included.\n * For IPv6 tunnels, 2 16b and 4 32b UDF qualifiers need to be included.\n\n\nHowever, in order to make room for the UDF qualifiers, other TCAM features/qualifiers must be removed due to hardware constraints. Following are some suggested TCAM profile changes to accommodate the required UDF qualifiers:\n\n * TCAM profile that includes the UDF qualifiers for IPv4 tunnels, but removes support for MPLS:\n\n\nhardware tcam\n profile test copy default\n feature acl port mac\n no key size limit \n key field udf-16b-1 udf-16b-2 udf-32b-1\n no feature mpls\n no feature mpls pop ingress\n no feature pbr mpls\n\n\n \n\n \n * TCAM profile that includes the UDF qualifiers for IPv4 tunnels, but removes support for VXLAN:\n\n\nhardware tcam\n profile test copy default\n feature acl port mac\n no key field src-mac\n key field udf-16b-1 udf-16b-2 udf-32b-1\n\n\n \n\n \n * TCAM profile that includes the UDF qualifiers for IPv6 tunnels, but removes support for VXLAN and PBR:\n\n\nhardware tcam\n profile test1 copy default\n feature acl port mac\n no key size limit\n no key field src-mac dst-mac\n key field udf-16b-1 udf-16b-2 udf-32b-1 udf-32b-2 udf-32b-3 udf-32b-4\n no feature tunnel vxlan\n no feature tunnel vxlan routing\n no feature pbr ip\n no feature pbr ipv6\n\n\n\n \n\n\n\nPlease contact Arista TAC if further assistance is needed with TCAM profile construction.",
"sourcePath": "/containers/cna/workarounds/2/value"
},
{
"lang": "en",
"value": "ACL to permit VXLAN v4 Decap only\n\nThis MAC ACL uses UDF to match on VXLAN packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IP DIP = VXLAN VTEP IP (say 0xXXXXXXXX - converted in hex)\n(c) UDP destination port = VXLAN UDP Port (0x12b5)\n\n\n\nIt allows VXLAN packets and drops all other packets to the VXLAN Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-udp offset 2 pattern 0x00110000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\n \nmac access-list payload alias udp-dport-vxlan offset 5 pattern 0x000012b5 mask 0xffff0000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-udp alias ip-dip-decap-ip alias udp-dport-vxlan\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\nACL to permit GREv4 Decap Only\n\nThis MAC ACL uses UDF to match on GRE packets as follows:\n(a) IP next protocol = GRE (0x2f)\n(b) IP DIP = GRE Decap IP (say 0xXXXXXXXX - converted in hex)\n\n\n\nIt allows GRE packets and drops all other packets to the GRE Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-gre offset 2 pattern 0x002f0000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\n\n\nIf needed, the ACL can also be tweaked to match on specific GRE payloads as follows:\n\nIPv4oGRE\n\nACL also matches on GRE next protocol = IPv4 (0x0800)\n\n\n\nmac access-list payload alias gre-protocol-ipv4 offset 5 pattern 0x00000800 mask 0xffff0000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip alias gre-protocol-ipv4\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\nIPv6oGRE\n\nACL also matches on GRE next protocol = IPv6 (0x86dd)\n\n\n\nmac access-list payload alias gre-protocol-ipv6 offset 5 pattern 0x000086dd mask 0xffff0000\nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip alias gre-protocol-ipv6\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\nMPLSoGRE\n\nACL also matches on GRE next protocol = MPLS (0x8847)\n\n\n\nmac access-list payload alias gre-protocol-mpls offset 5 pattern 0x00008847 mask 0xffff0000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip alias gre-protocol-mpls\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any",
"sourcePath": "/containers/cna/workarounds/3/value"
},
{
"lang": "en",
"value": "ACL to permit IP-in-IPv4 Decap Only\n\nThis MAC ACL uses UDF to match on IP-in-IP packets as follows:\n(a) IP next protocol = IPv4 (0x04) or IPv6 (0x29)\n(b) IP DIP = IP-in-IP Decap IP (say 0xXXXXXXXX - converted in hex)\n\n\n\nIt allows IP-in-ip packets and drops all other packets to the IP-in-IP Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-ipv4 offset 2 pattern 0x00040000 mask 0xff00ffff\n \nmac access-list payload alias ip-next-protocol-ipv6 offset 2 pattern 0x00290000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-ipv4 alias ip-dip-decap-ip \n 2 permit any any ip payload alias ip-next-protocol-ipv6 alias ip-dip-decap-ip\n 3 deny any any ip payload alias ip-dip-decap-ip\n 4 permit any any\n\n\n \n\nACL to permit GUEv4 Decap Only\n\nThis MAC ACL uses UDF to match on GUE packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IP DIP = GUE Decap IP (say 0xXXXXXXXX - converted in hex)\n(c) UDP destination port = UDP port configured per payload\n (say UDP port for IP payload = 0xYYYY or UDP port for MPLS payload = 0xZZZZ - converted in hex)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-udp offset 2 pattern 0x00110000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\n \nmac access-list payload alias udp-dport-gue-ip offset 5 pattern 0x0000YYYY mask 0xffff0000\n \nmac access-list payload alias udp-dport-gue-mpls offset 5 pattern 0x0000ZZZZ mask 0xffff0000\n \nmac access-list foo\n 1 permit any any ip payload alias ip-next-protocol-udp alias ip-dip-decap-ip alias udp-dport-gue-mpls\n 2 permit any any ip payload alias ip-next-protocol-udp alias ip-dip-decap-ip alias udp-dport-gue-ip\n 3 deny any any ip payload alias ip-dip-decap-ip\n 4 permit any any\n\n\n \n\nACL to permit GUEv6 Decap Only\n\nThis MAC ACL uses UDF to match on GUE packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IPv6 DIP = GUE Decap IP (say 0xAAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD - converted in hex)\n(c) UDP destination port = UDP port configured per payload\n (say UDP port for IP payload = 0xYYYY or UDP port for MPLS payload = 0xZZZZ - converted in hex)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nmac access-list payload alias ipv6-next-protocol-udp offset 1 pattern 0x00001100 mask 0xffff00ff\n \nmac access-list payload alias udp-dport-gue-ip offset 10 pattern 0x0000YYYY mask 0xffff0000\n \nmac access-list payload alias udp-dport-gue-mpls offset 10 pattern 0x0000ZZZZ mask 0xffff0000\n \nmac access-list payload alias ipv6-dip-decap-ip1 offset 6 pattern 0xAAAAAAAA mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip2 offset 7 pattern 0xBBBBBBBB mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip3 offset 8 pattern 0xCCCCCCCC mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip4 offset 9 pattern 0xDDDDDDDD mask 0\n \nmac access-list foo\n counters per-entry\n 1 permit any any ipv6 payload alias ipv6-next-protocol-udp alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4 alias udp-dport-gue-ip\n 2 permit any any ipv6 payload alias ipv6-next-protocol-udp alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4 alias udp-dport-gue-mpls\n 3 deny any any ipv6 payload alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 4 permit any any",
"sourcePath": "/containers/cna/workarounds/4/value"
},
{
"lang": "en",
"value": "ACL to permit IP-in-IPv6 Decap Only\n\nThe MAC ACL uses UDF to match on IP-in-IPv6 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IPv6 DIP = IP-in-IP Decap IP (say 0xAAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD - converted in hex)\n\n\n\nIt allows IP-in-ip packets and drops all other packets to the IP-in-IP Decap IP.\n\n\n\nmac access-list payload alias ipv6-next-protocol-ipv4 offset 1 pattern 0x00000400 mask 0xffff00ff\n \nmac access-list payload alias ipv6-next-protocol-ipv6 offset 1 pattern 0x00002900 mask 0xffff00ff\n \nmac access-list payload alias ipv6-dip-decap-ip1 offset 6 pattern 0xAAAAAAAA mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip2 offset 7 pattern 0xBBBBBBBB mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip3 offset 8 pattern 0xCCCCCCCC mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip4 offset 9 pattern 0xDDDDDDDD mask 0\n \nmac access-list foo\n counters per-entry\n 1 permit any any ipv6 payload alias ipv6-next-protocol-ipv4 alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 2 permit any any ipv6 payload alias ipv6-next-protocol-ipv6 alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 3 deny any any ipv6 payload alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 4 permit any any\n\n\n \n\n7280R3 Series, 7500R3 Series, and 7800R3 Series\n\nMitigation involves using IPv6 PACLs to allow specific expected protocol packets and block all other traffic to the configured decap IPs. This requires the following TCAM profile update with the specified packet types:\n\n\n\nhardware tcam\n profile test\n feature acl port ipv6\n packet ipv6 ipv4 forwarding routed decap\n packet ipv6 ipv6 forwarding routed decap\n packet ipv6 gue ipv4 forwarding routed decap\n packet ipv6 gue ipv6 forwarding routed decap\n packet ipv6 gue mpls forwarding mpls decap\n\n\n \n\n\n\nNote that introducing new packet types might also require specifying them under other features such as “acl vlan” or “qos ipv6”. Please reach out, if further assistance is needed with TCAM profile construction.\n\nACL to Permit GUEv6 Only\n\nThis IPv6 ACL matches on GUE packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IP DIP = GUE Decap IP\n(c) UDP destination port = UDP port configured per payload\n (IP = Y or MPLS = Z)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit udp any host eq Y\n 2 permit udp any host eq Z\n 3 deny ipv6 any host \n 4 permit ipv6 any any\n\n\n \n\nACL to Permit IP-in-IPv6 Only\n\nThis IPv6 ACL matches on IP-in-IPv6 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IP DIP = IP-in-IP Decap IP\n\n\n\nIt allows IP-in-IPv6 packets and drops all other packets to the IP-in-IPv6 Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit 4 any host \n 2 permit 41 any host \n 3 deny ipv6 any host \n 4 permit ipv6 any any",
"sourcePath": "/containers/cna/workarounds/5/value"
}
],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-1023",
"lang": "en",
"description": "CWE-1023: Incomplete Comparison with Missing Factors",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"provider": "Arista",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
},
{
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"provider": "Arista",
"sourcePath": "/containers/cna/metrics/1/cvssV4_0"
}
],
"references": [
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137",
"label": "Arista",
"tags": [
"vendor-advisory"
],
"provider": "Arista",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137",
"label": "CISA-ADP",
"tags": [
"vendor-advisory"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-7473",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"Arista Networks\",\"product\":\"EOS\",\"platforms\":[\"7020R Series\",\"7280R/R2 Series\",\"7500R/R2 Series\",\"7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)\",\"7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)\",\"7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)\"],\"versions\":[{\"status\":\"affected\",\"version\":\"4.36.0\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.35.0\",\"lessThanOrEqual\":\"4.35\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.34.0\",\"lessThanOrEqual\":\"4.34\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.33.0\",\"lessThanOrEqual\":\"4.33\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.32.0\",\"lessThanOrEqual\":\"4.32\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.31.0\",\"lessThanOrEqual\":\"4.31\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"*\",\"lessThanOrEqual\":\"4.30\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic.\n\n\n\nThis issue has been reported as being exploited in the wild.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/solutions/0/value",
"text": "No software upgrade path is planned to address this issue due to the risk of breaking existing configuration on deployments. The recommended resolution of this issue is to follow the appropriate mitigation instructions detailed in the workaround block.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/workarounds/0/value",
"text": "There are two broad approaches to mitigate this issue - (1) applying ACLs on upstream devices or (2) applying ACLs on the devices where the unexpected decapsulation is happening. In both cases, the idea is to either selectively allow only legitimate tunnel traffic or to selectively block malicious tunnel traffic. For example, if a network is configured to forward VXLAN traffic, but GRE traffic is being unexpectedly forwarded, then ACLs can be used to either selectively allow just VXLAN traffic or selectively block GRE traffic. More details about using the ACL feature can be found in the Arista User Manual https://www.arista.com/en/um-eos/eos-acls-and-route-maps#xx1150869 .\n\n\n\nA note of caution, the following ACL-based mitigation recommendations assume that the tunnel IP is dedicated solely to receiving the configured tunnel protocol traffic. When adapting these rules for your environment, it is important to explicitly permit any additional protocol traffic—such as BGP or SSH—if that IP serves multiple functions. To maintain connectivity, ensure these permit statements are sequenced before any deny statements directed at the decapsulation IP.\n\n\n\nThe following configurations align with the recommendations outlined in the Arista EOS Hardening Guide https://arista.my.site.com/AristaCommunity/s/article/arista-eos-hardening-guide#Comm_Kna_ka0Uw00000097VJIAY_71 .",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/1/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/workarounds/1/value",
"text": "Approach 1 - Applying ACL on Upstream Switches\n\nOn upstream devices, applying ACLs to allow specific tunneled traffic is straightforward. ACLs can be applied that match on tunnel destination IP, the IP next protocol field, and (optionally) UDP destination port to selectively allow or block specific tunnel protocols.\n\n\n\nExample ACLs for Arista EOS follows.\n\nACL to permit VXLANv4 Only\n\nThis IPv4 ACL matches on VXLAN packets as follows:\n(a) IP next protocol = UDP (17)\n(b) IP DIP = VXLAN VTEP IP\n(c) UDP destination port = VXLAN UDP Port (4789)\n\n\n\nIt allows VXLAN packets and drops all other packets to the VXLAN Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit udp any host eq 4789\n 2 deny ip any host \n 3 permit ip any any\n\n\n \n\nACL to permit GREv4 Only\n\nThis IPv4 ACL matches on GRE packets as follows:\n(a) IP next protocol = GRE (47)\n(b) IP DIP = GRE Tunnel Destination IP\n\n\n\nIt allows GRE packets and drops all other packets to the GRE Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit gre any host \n 2 deny ip any host \n 3 permit any any\n\n\n \n\nACL to permit IP-in-IPv4 Only\n\nThis IPv4 ACL matches on IP-in-IPv4 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IP DIP = IP-in-IP Decap IP\n\n\n\nIt allows IP-in-IPv4 packets and drops all other packets to the IP-in-IPv4 Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit 4 any host \n 2 permit 41 any host \n 3 deny ip any host \n 4 permit any any\n\n\n \n\nACL to Permit IP-in-IPv6 Only\n\nThis IPv6 ACL matches on IP-in-IPv6 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IP DIP = IP-in-IP Decap IP\n\n\n\nIt allows IP-in-IPv6 packets and drops all other packets to the IP-in-IPv6 Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit 4 any host \n 2 permit 41 any host \n 3 deny ipv6 any host \n 4 permit ipv6 any any\n\n\n \n\nACL to permit GUEv4 Only\n\nThis IPv4 ACL matches on GUE packets as follows:\n(a) IP next protocol = UDP (17)\n(b) IP DIP = GUE Decap IP\n(c) UDP destination port = UDP port configured per payload\n (IP = Y or MPLS = Z)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nip access-list foo\n counters per-entry\n 1 permit udp any host eq Y\n 2 permit udp any host eq Z\n 3 deny ip any host \n 4 permit ip any any\n\n\n \n\nACL to Permit GUEv6 Only\n\nThis IPv6 ACL matches on GUE packets as follows:\n(a) IP next protocol = UDP (17)\n(b) IP DIP = GUE Decap IP\n(c) UDP destination port = UDP port configured per payload\n (IP = Y or MPLS = Z)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit udp any host eq Y\n 2 permit udp any host eq Z\n 3 deny ipv6 any host \n 4 permit ipv6 any any",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/2/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/workarounds/2/value",
"text": "Approach 2 - Applying ACL on Decapsulation Switches\n\nApplying ACLs on the decapsulation device is more complicated. It requires the use of MAC ACLs on 7020R Series, 7280R/R2 Series, and 7500R/R2 Series systems and IP ACLs on 7280R3 Series, 7500R3 Series, and 7800R3 Series systems. In both cases, a TCAM profile update is also required. Note that TCAM profile update is a disruptive operation that could impact traffic forwarding. More information can be found in User-defined TCAM Profiles https://www.arista.com/en/support/toi/eos-4-26-0f/14755-user-defined-tcam-profiles .\n\n7020R Series, 7280R/R2 Series, and 7500R/R2 Series\n\nMitigation involves using MAC ACLs to allow specific expected protocol packets and block all other traffic to the configured decap IPs. The suggested MAC ACLs use User Defined Fields (UDFs) to match on specific fields in the packet headers. This requires a TCAM profile update to include the following UDF qualifiers:\n\n * For IPv4 tunnels, 2 16b and 1 32b UDF qualifiers need to be included.\n * For IPv6 tunnels, 2 16b and 4 32b UDF qualifiers need to be included.\n\n\nHowever, in order to make room for the UDF qualifiers, other TCAM features/qualifiers must be removed due to hardware constraints. Following are some suggested TCAM profile changes to accommodate the required UDF qualifiers:\n\n * TCAM profile that includes the UDF qualifiers for IPv4 tunnels, but removes support for MPLS:\n\n\nhardware tcam\n profile test copy default\n feature acl port mac\n no key size limit \n key field udf-16b-1 udf-16b-2 udf-32b-1\n no feature mpls\n no feature mpls pop ingress\n no feature pbr mpls\n\n\n \n\n \n * TCAM profile that includes the UDF qualifiers for IPv4 tunnels, but removes support for VXLAN:\n\n\nhardware tcam\n profile test copy default\n feature acl port mac\n no key field src-mac\n key field udf-16b-1 udf-16b-2 udf-32b-1\n\n\n \n\n \n * TCAM profile that includes the UDF qualifiers for IPv6 tunnels, but removes support for VXLAN and PBR:\n\n\nhardware tcam\n profile test1 copy default\n feature acl port mac\n no key size limit\n no key field src-mac dst-mac\n key field udf-16b-1 udf-16b-2 udf-32b-1 udf-32b-2 udf-32b-3 udf-32b-4\n no feature tunnel vxlan\n no feature tunnel vxlan routing\n no feature pbr ip\n no feature pbr ipv6\n\n\n\n \n\n\n\nPlease contact Arista TAC if further assistance is needed with TCAM profile construction.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/3/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/workarounds/3/value",
"text": "ACL to permit VXLAN v4 Decap only\n\nThis MAC ACL uses UDF to match on VXLAN packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IP DIP = VXLAN VTEP IP (say 0xXXXXXXXX - converted in hex)\n(c) UDP destination port = VXLAN UDP Port (0x12b5)\n\n\n\nIt allows VXLAN packets and drops all other packets to the VXLAN Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-udp offset 2 pattern 0x00110000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\n \nmac access-list payload alias udp-dport-vxlan offset 5 pattern 0x000012b5 mask 0xffff0000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-udp alias ip-dip-decap-ip alias udp-dport-vxlan\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\nACL to permit GREv4 Decap Only\n\nThis MAC ACL uses UDF to match on GRE packets as follows:\n(a) IP next protocol = GRE (0x2f)\n(b) IP DIP = GRE Decap IP (say 0xXXXXXXXX - converted in hex)\n\n\n\nIt allows GRE packets and drops all other packets to the GRE Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-gre offset 2 pattern 0x002f0000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\n\n\nIf needed, the ACL can also be tweaked to match on specific GRE payloads as follows:\n\nIPv4oGRE\n\nACL also matches on GRE next protocol = IPv4 (0x0800)\n\n\n\nmac access-list payload alias gre-protocol-ipv4 offset 5 pattern 0x00000800 mask 0xffff0000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip alias gre-protocol-ipv4\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\nIPv6oGRE\n\nACL also matches on GRE next protocol = IPv6 (0x86dd)\n\n\n\nmac access-list payload alias gre-protocol-ipv6 offset 5 pattern 0x000086dd mask 0xffff0000\nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip alias gre-protocol-ipv6\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any\n\n\n \n\nMPLSoGRE\n\nACL also matches on GRE next protocol = MPLS (0x8847)\n\n\n\nmac access-list payload alias gre-protocol-mpls offset 5 pattern 0x00008847 mask 0xffff0000\n \nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-gre alias ip-dip-decap-ip alias gre-protocol-mpls\n 2 deny any any ip payload alias ip-dip-decap-ip\n 3 permit any any",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/4/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/workarounds/4/value",
"text": "ACL to permit IP-in-IPv4 Decap Only\n\nThis MAC ACL uses UDF to match on IP-in-IP packets as follows:\n(a) IP next protocol = IPv4 (0x04) or IPv6 (0x29)\n(b) IP DIP = IP-in-IP Decap IP (say 0xXXXXXXXX - converted in hex)\n\n\n\nIt allows IP-in-ip packets and drops all other packets to the IP-in-IP Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-ipv4 offset 2 pattern 0x00040000 mask 0xff00ffff\n \nmac access-list payload alias ip-next-protocol-ipv6 offset 2 pattern 0x00290000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\nmac access-list foo\n counters per-entry\n 1 permit any any ip payload alias ip-next-protocol-ipv4 alias ip-dip-decap-ip \n 2 permit any any ip payload alias ip-next-protocol-ipv6 alias ip-dip-decap-ip\n 3 deny any any ip payload alias ip-dip-decap-ip\n 4 permit any any\n\n\n \n\nACL to permit GUEv4 Decap Only\n\nThis MAC ACL uses UDF to match on GUE packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IP DIP = GUE Decap IP (say 0xXXXXXXXX - converted in hex)\n(c) UDP destination port = UDP port configured per payload\n (say UDP port for IP payload = 0xYYYY or UDP port for MPLS payload = 0xZZZZ - converted in hex)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nmac access-list payload alias ip-next-protocol-udp offset 2 pattern 0x00110000 mask 0xff00ffff\n \nmac access-list payload alias ip-dip-decap-ip offset 4 pattern 0xXXXXXXXX mask 0x00000000\n \nmac access-list payload alias udp-dport-gue-ip offset 5 pattern 0x0000YYYY mask 0xffff0000\n \nmac access-list payload alias udp-dport-gue-mpls offset 5 pattern 0x0000ZZZZ mask 0xffff0000\n \nmac access-list foo\n 1 permit any any ip payload alias ip-next-protocol-udp alias ip-dip-decap-ip alias udp-dport-gue-mpls\n 2 permit any any ip payload alias ip-next-protocol-udp alias ip-dip-decap-ip alias udp-dport-gue-ip\n 3 deny any any ip payload alias ip-dip-decap-ip\n 4 permit any any\n\n\n \n\nACL to permit GUEv6 Decap Only\n\nThis MAC ACL uses UDF to match on GUE packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IPv6 DIP = GUE Decap IP (say 0xAAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD - converted in hex)\n(c) UDP destination port = UDP port configured per payload\n (say UDP port for IP payload = 0xYYYY or UDP port for MPLS payload = 0xZZZZ - converted in hex)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nmac access-list payload alias ipv6-next-protocol-udp offset 1 pattern 0x00001100 mask 0xffff00ff\n \nmac access-list payload alias udp-dport-gue-ip offset 10 pattern 0x0000YYYY mask 0xffff0000\n \nmac access-list payload alias udp-dport-gue-mpls offset 10 pattern 0x0000ZZZZ mask 0xffff0000\n \nmac access-list payload alias ipv6-dip-decap-ip1 offset 6 pattern 0xAAAAAAAA mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip2 offset 7 pattern 0xBBBBBBBB mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip3 offset 8 pattern 0xCCCCCCCC mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip4 offset 9 pattern 0xDDDDDDDD mask 0\n \nmac access-list foo\n counters per-entry\n 1 permit any any ipv6 payload alias ipv6-next-protocol-udp alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4 alias udp-dport-gue-ip\n 2 permit any any ipv6 payload alias ipv6-next-protocol-udp alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4 alias udp-dport-gue-mpls\n 3 deny any any ipv6 payload alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 4 permit any any",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/5/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/workarounds/5/value",
"text": "ACL to permit IP-in-IPv6 Decap Only\n\nThe MAC ACL uses UDF to match on IP-in-IPv6 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IPv6 DIP = IP-in-IP Decap IP (say 0xAAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD - converted in hex)\n\n\n\nIt allows IP-in-ip packets and drops all other packets to the IP-in-IP Decap IP.\n\n\n\nmac access-list payload alias ipv6-next-protocol-ipv4 offset 1 pattern 0x00000400 mask 0xffff00ff\n \nmac access-list payload alias ipv6-next-protocol-ipv6 offset 1 pattern 0x00002900 mask 0xffff00ff\n \nmac access-list payload alias ipv6-dip-decap-ip1 offset 6 pattern 0xAAAAAAAA mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip2 offset 7 pattern 0xBBBBBBBB mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip3 offset 8 pattern 0xCCCCCCCC mask 0\n \nmac access-list payload alias ipv6-dip-decap-ip4 offset 9 pattern 0xDDDDDDDD mask 0\n \nmac access-list foo\n counters per-entry\n 1 permit any any ipv6 payload alias ipv6-next-protocol-ipv4 alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 2 permit any any ipv6 payload alias ipv6-next-protocol-ipv6 alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 3 deny any any ipv6 payload alias ipv6-dip-decap-ip1 alias ipv6-dip-decap-ip2 alias ipv6-dip-decap-ip3 alias ipv6-dip-decap-ip4\n 4 permit any any\n\n\n \n\n7280R3 Series, 7500R3 Series, and 7800R3 Series\n\nMitigation involves using IPv6 PACLs to allow specific expected protocol packets and block all other traffic to the configured decap IPs. This requires the following TCAM profile update with the specified packet types:\n\n\n\nhardware tcam\n profile test\n feature acl port ipv6\n packet ipv6 ipv4 forwarding routed decap\n packet ipv6 ipv6 forwarding routed decap\n packet ipv6 gue ipv4 forwarding routed decap\n packet ipv6 gue ipv6 forwarding routed decap\n packet ipv6 gue mpls forwarding mpls decap\n\n\n \n\n\n\nNote that introducing new packet types might also require specifying them under other features such as “acl vlan” or “qos ipv6”. Please reach out, if further assistance is needed with TCAM profile construction.\n\nACL to Permit GUEv6 Only\n\nThis IPv6 ACL matches on GUE packets as follows:\n(a) IP next protocol = UDP (0x11)\n(b) IP DIP = GUE Decap IP\n(c) UDP destination port = UDP port configured per payload\n (IP = Y or MPLS = Z)\n\n\n\nIt allows GUE packets and drops all other packets to the GUE Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit udp any host eq Y\n 2 permit udp any host eq Z\n 3 deny ipv6 any host \n 4 permit ipv6 any any\n\n\n \n\nACL to Permit IP-in-IPv6 Only\n\nThis IPv6 ACL matches on IP-in-IPv6 packets as follows:\n(a) IP next protocol = IPv4 (4) or IPv6 (41)\n(b) IP DIP = IP-in-IP Decap IP\n\n\n\nIt allows IP-in-IPv6 packets and drops all other packets to the IP-in-IPv6 Decap IP.\n\n\n\nipv6 access-list foo\n counters per-entry\n 1 permit 4 any host \n 2 permit 41 any host \n 3 deny ipv6 any host \n 4 permit ipv6 any any",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"lang\":\"en\",\"cweId\":\"CWE-1023\",\"description\":\"CWE-1023: Incomplete Comparison with Missing Factors\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":5.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/1/cvssV4_0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourcePath": "/containers/cna/metrics/1/cvssV4_0",
"text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":6.9,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-10-07T18:27:31.678Z",
"fetchedAt": "2026-10-23T02:43:50.627Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-09T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"sourceSummary": "EOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:24.167Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "aeb885275eaed2fa140b8f3352493a10449c2110d63157f4545074972f85dace",
"sourceModifiedAt": "2026-10-07T18:27:31.678Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "Arista EOS が影響を受けるプラットフォームで、VXLAN、decap-groups、または GRE トンネルインターフェースなどのトンネルデカプス設定がある場合、スイッチはトンネルプロトコルの種類を確認せずに、設定されたデカプス IP と一致する宛先 IP を持つ予期しないトンネルパケットを誤ってデカプスし転送します。",
"risk": "この不具合により、設定されていないトンネルトラフィックが予期せず処理される可能性があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "Arista EOS の 7020R Series、7280R/R2 Series、7500R/R2 Series、7280R3 Series（IP-in-IPv6 と GUEv6 に限定）、7500R3 Series（IP-in-IPv6 と GUEv6 に限定）、7800R3 Series（IP-in-IPv6 と GUEv6 に限定）で、VXLAN、decap-groups、または GRE トンネルインターフェースなどのトンネルデカプス設定が有効になっている場合に影響します。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json"
],
"evidenceIds": [
"E1",
"E3",
"E2"
]
},
{
"text": "公式の対象表：Arista Networks / EOS。影響ありとして記載：4.36.0。影響ありとして記載：4.35.0以上、4.35以下。影響ありとして記載：4.34.0以上、4.34以下。影響ありとして記載：4.33.0以上、4.33以下。影響ありとして記載：4.32.0以上、4.32以下。影響ありとして記載：4.31.0以上、4.31以下。影響ありとして記載：4.30以下の版。対象の環境：7020R Series、7280R/R2 Series、7500R/R2 Series、7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)、7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)、7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)。個別に例外が記されていない版も、原資料では影響ありとされています。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「EOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-7473",
"https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473",
"https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137",
"https://nvd.nist.gov/vuln/detail/CVE-2026-7473"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-7473",
"https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473",
"https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137",
"https://nvd.nist.gov/vuln/detail/CVE-2026-7473"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-7473",
"https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473",
"https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137",
"https://nvd.nist.gov/vuln/detail/CVE-2026-7473"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"label": "CVE：Arista"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7473",
"label": "CVE公式レコード"
},
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7473",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic.\n\n\n\nThis issue has been reported as being exploited in the wild.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourceField": "/containers/cna/title",
"excerpt": "Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/7xxx/CVE-2026-7473.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"Arista Networks\",\"product\":\"EOS\",\"platforms\":[\"7020R Series\",\"7280R/R2 Series\",\"7500R/R2 Series\",\"7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)\",\"7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)\",\"7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)\"],\"versions\":[{\"status\":\"affected\",\"version\":\"4.36.0\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.35.0\",\"lessThanOrEqual\":\"4.35\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.34.0\",\"lessThanOrEqual\":\"4.34\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.33.0\",\"lessThanOrEqual\":\"4.33\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.32.0\",\"lessThanOrEqual\":\"4.32\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"4.31.0\",\"lessThanOrEqual\":\"4.31\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"*\",\"lessThanOrEqual\":\"4.30\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7473",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-7473\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-7473（EOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Arista EOS の 7020R Series、7280R/R2 Series、7500R/R2 Series、7280R3 Series（IP-in-IPv6 と GUEv6 に限定）、7500R3 Series（IP-in-IPv6 と GUEv6 に限定）、7800R3 Series（IP-in-IPv6 と GUEv6 に限定）で、VXLAN、decap-groups、または GRE トンネルインターフェースなどのトンネルデカプス設定が有効になっている場合に影響します。\n・公式の対象表：Arista Networks / EOS。影響ありとして記載：4.36.0。影響ありとして記載：4.35.0以上、4.35以下。影響ありとして記載：4.34.0以上、4.34以下。影響ありとして記載：4.33.0以上、4.33以下。影響ありとして記載：4.32.0以上、4.32以下。影響ありとして記載：4.31.0以上、4.31以下。影響ありとして記載：4.30以下の版。対象の環境：7020R Series、7280R/R2 Series、7500R/R2 Series、7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)、7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)、7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-7473",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:24.167Z",
"lastSuccess": "2026-10-23T03:23:24.167Z",
"sourceCheckedAt": "2026-10-23T02:43:50.627Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-42271",
"aliases": [],
"title": "litellm：コード実行",
"summary": "LiteLLM は LLM API を呼び出すためのプロキシサーバー（AI ゲートウェイ）です。バージョン 1.74.2 から 1.83.7 未満までの間、MCP サーバーを保存前にプレビューするための 2 つのエンドポイント（POST /mcp-rest/test/connection と POST /mcp-rest/test/tools/list）が、リクエストボディにコマンド・引数・環境変数を含む stdio 設定を受け付けました。stdio 設定で呼び出すと、エンドポイントは接続を試み、その際に指定されたコマンドをプロキシホスト上でサブプロセスとして起動し、プロキシプロセスと同じ権限で実行します。このエンドポイントは有効なプロキシ API キーさえあれば利用でき、ロールチェックが行われません。そのため、低権限の internal‑user キーを持つ認証済みユーザーでもホスト上で任意のコマンドを実行できました。この問題はバージョン 1.83.7 で修正されています。",
"risk": "認証済みユーザーがホスト上で任意のコマンドを実行できるため、システムが乗っ取られる可能性があります。",
"product": "litellm",
"category": "other",
"component": "package",
"severity": "high",
"cvss": 8.7,
"cvssVersion": "4.0",
"cvssSource": "GitHub_M",
"cvssVector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N",
"affected": [
{
"product": "litellm",
"range": ">= 1.74.2, < 1.83.7"
}
],
"fixed": [],
"steps": [
"バージョン 1.83.7 以降にアップグレードして修正を適用する。",
"「CVE-2026-42271」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"label": "CVE：GitHub_M"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42271",
"label": "CVE公式レコード"
},
{
"url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"label": "CISAが示す関連情報"
},
{
"url": "https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42271",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-05-08T03:35:16.758Z",
"modifiedAt": "2026-07-15T00:57:49.325Z",
"fetchedAt": "2026-10-23T02:43:48.934Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spawned the supplied command as a subprocess on the proxy host with the privileges of the proxy process. The endpoints were gated only by a valid proxy API key, with no role check. Any authenticated user — including holders of low-privilege internal-user keys — could therefore run arbitrary commands on the host. This issue has been patched in version 1.83.7.",
"sourceTitle": "LiteLLM: Authenticated command execution via MCP stdio test endpoints",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"vendor": "BerriAI",
"product": "litellm",
"versions": [
{
"version": ">= 1.74.2, < 1.83.7",
"status": "affected"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-42271",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"fetchedAt": "2026-10-23T02:43:48.934Z",
"publishedAt": "2026-05-08T03:35:16.758Z",
"modifiedAt": "2026-07-15T00:57:49.325Z",
"state": "published",
"provider": "GitHub_M",
"title": "LiteLLM: Authenticated command execution via MCP stdio test endpoints",
"descriptions": [
{
"lang": "en",
"value": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spawned the supplied command as a subprocess on the proxy host with the privileges of the proxy process. The endpoints were gated only by a valid proxy API key, with no role check. Any authenticated user — including holders of low-privilege internal-user keys — could therefore run arbitrary commands on the host. This issue has been patched in version 1.83.7.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "BerriAI",
"product": "litellm",
"sourcePath": "/containers/cna/affected/0",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": ">= 1.74.2, < 1.83.7",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-77",
"lang": "en",
"description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
},
{
"cweId": "CWE-78",
"lang": "en",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
"sourcePath": "/containers/cna/problemTypes/1/descriptions/0"
}
],
"metrics": [
{
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"provider": "GitHub_M",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0"
},
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"provider": "redhat-SADP",
"sourcePath": "/containers/adp/1/metrics/1/cvssV3_1"
}
],
"references": [
{
"url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"label": "https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"tags": [
"x_refsource_CONFIRM"
],
"provider": "GitHub_M",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"label": "https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"tags": [
"x_refsource_MISC"
],
"provider": "GitHub_M",
"sourcePath": "/containers/cna/references/1"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42271",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2026-42271",
"label": "redhat-SADP",
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"provider": "redhat-SADP",
"sourcePath": "/containers/adp/1/references/0"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467924",
"label": "RHBZ#2467924",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"provider": "redhat-SADP",
"sourcePath": "/containers/adp/1/references/1"
},
{
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42271.json",
"label": "redhat-SADP",
"tags": [
"x_sadp-csaf-vex"
],
"provider": "redhat-SADP",
"sourcePath": "/containers/adp/1/references/2"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:28960",
"label": "redhat-SADP",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"provider": "redhat-SADP",
"sourcePath": "/containers/adp/1/references/3"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:30056",
"label": "redhat-SADP",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"provider": "redhat-SADP",
"sourcePath": "/containers/adp/1/references/4"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:27784",
"label": "redhat-SADP",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"provider": "redhat-SADP",
"sourcePath": "/containers/adp/1/references/5"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"vendor\":\"BerriAI\",\"product\":\"litellm\",\"versions\":[{\"version\":\">= 1.74.2, < 1.83.7\",\"status\":\"affected\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spawned the supplied command as a subprocess on the proxy host with the privileges of the proxy process. The endpoints were gated only by a valid proxy API key, with no role check. Any authenticated user — including holders of low-privilege internal-user keys — could therefore run arbitrary commands on the host. This issue has been patched in version 1.83.7.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"cweId\":\"CWE-77\",\"lang\":\"en\",\"description\":\"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourcePath": "/containers/cna/problemTypes/1/descriptions/0",
"text": "{\"cweId\":\"CWE-78\",\"lang\":\"en\",\"description\":\"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV4_0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourcePath": "/containers/cna/metrics/0/cvssV4_0",
"text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"baseScore\":8.7,\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N\",\"version\":\"4.0\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/adp/1/metrics/1/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourcePath": "/containers/adp/1/metrics/1/cvssV3_1",
"text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-07-15T00:57:49.325Z",
"fetchedAt": "2026-10-23T02:43:48.934Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-08T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"sourceSummary": "litellmにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:24.849Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "890c653e86075343120539289abd037d821ee17f65144f00b770687acac4d5c7",
"sourceModifiedAt": "2026-07-15T00:57:49.325Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "LiteLLM は LLM API を呼び出すためのプロキシサーバー（AI ゲートウェイ）です。バージョン 1.74.2 から 1.83.7 未満までの間、MCP サーバーを保存前にプレビューするための 2 つのエンドポイント（POST /mcp-rest/test/connection と POST /mcp-rest/test/tools/list）が、リクエストボディにコマンド・引数・環境変数を含む stdio 設定を受け付けました。stdio 設定で呼び出すと、エンドポイントは接続を試み、その際に指定されたコマンドをプロキシホスト上でサブプロセスとして起動し、プロキシプロセスと同じ権限で実行します。このエンドポイントは有効なプロキシ API キーさえあれば利用でき、ロールチェックが行われません。そのため、低権限の internal‑user キーを持つ認証済みユーザーでもホスト上で任意のコマンドを実行できました。この問題はバージョン 1.83.7 で修正されています。",
"risk": "認証済みユーザーがホスト上で任意のコマンドを実行できるため、システムが乗っ取られる可能性があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "LiteLLM のバージョンが 1.74.2 以上かつ 1.83.7 未満であること。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "POST /mcp-rest/test/connection エンドポイントが、リクエストボディにコマンド・引数・環境変数を含む stdio 設定を受け付けること。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "POST /mcp-rest/test/tools/list エンドポイントが、同様にコマンド・引数・環境変数を含む stdio 設定を受け付けること。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "エンドポイントへのアクセスは有効なプロキシ API キーがあれば可能で、ロールチェックが行われないこと。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "低権限の internal‑user キーを持つ認証済みユーザーでも上記エンドポイントを利用できること。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "公式の対象表：BerriAI / litellm。影響ありとして記載：>= 1.74.2, < 1.83.7。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271"
],
"evidenceIds": [
"E4"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「litellm」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-42271",
"https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42271"
]
}
],
"actions": [
{
"text": "バージョン 1.83.7 以降にアップグレードして修正を適用する。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E1"
]
},
{
"text": "「CVE-2026-42271」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-42271",
"https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42271"
]
},
{
"text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-42271",
"https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42271"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-42271",
"https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42271"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-42271",
"https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42271"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"label": "CVE：GitHub_M"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42271",
"label": "CVE公式レコード"
},
{
"url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g",
"label": "CISAが示す関連情報"
},
{
"url": "https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42271",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v4.0/specification-document",
"label": "FIRST公式：CVSS 4.0の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spawned the supplied command as a subprocess on the proxy host with the privileges of the proxy process. The endpoints were gated only by a valid proxy API key, with no role check. Any authenticated user — including holders of low-privilege internal-user keys — could therefore run arbitrary commands on the host. This issue has been patched in version 1.83.7.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourceField": "/containers/cna/title",
"excerpt": "LiteLLM: Authenticated command execution via MCP stdio test endpoints",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42271.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"vendor\":\"BerriAI\",\"product\":\"litellm\",\"versions\":[{\"version\":\">= 1.74.2, < 1.83.7\",\"status\":\"affected\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42271",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-42271\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-42271（litellm）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・LiteLLM のバージョンが 1.74.2 以上かつ 1.83.7 未満であること。\n・POST /mcp-rest/test/connection エンドポイントが、リクエストボディにコマンド・引数・環境変数を含む stdio 設定を受け付けること。\n・POST /mcp-rest/test/tools/list エンドポイントが、同様にコマンド・引数・環境変数を含む stdio 設定を受け付けること。\n・エンドポイントへのアクセスは有効なプロキシ API キーがあれば可能で、ロールチェックが行われないこと。\n・低権限の internal‑user キーを持つ認証済みユーザーでも上記エンドポイントを利用できること。\n・公式の対象表：BerriAI / litellm。影響ありとして記載：>= 1.74.2, < 1.83.7。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-42271",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:24.849Z",
"lastSuccess": "2026-10-23T03:23:24.849Z",
"sourceCheckedAt": "2026-10-23T02:43:48.934Z",
"errorCode": null
},
"glossary": [
{
"term": "POST",
"meaning": "フォームなどのデータを、相手のサーバーへ送るための通信方法です。この言葉だけで、情報漏えいや設定変更が起きたと判断するものではありません。",
"sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Methods/POST",
"kind": "general_definition"
}
]
}
},
{
"id": "CVE-2026-50751",
"aliases": [],
"title": "Quantum Security Gateway / Spark Firewalls：認証の回避",
"summary": "リモートアクセスとモバイルアクセスの証明書検証におけるロジックフローの弱点により、廃止された IKEv1 キー交換を使用した場合、認証されていないリモート攻撃者がユーザー認証を回避し、正当なユーザーパスワードなしでリモートアクセス VPN 接続を確立できる。",
"risk": "攻撃者が認証を回避してリモートアクセス VPN に接続できるため、組織の内部ネットワークへ不正に侵入される可能性がある。",
"product": "Quantum Security Gateway / Spark Firewalls",
"category": "other",
"component": "package",
"severity": "unknown",
"cvss": null,
"cvssVersion": null,
"cvssSource": "checkpoint",
"cvssVector": null,
"affected": [
{
"product": "Quantum Security Gateway",
"range": "R82.10 with Jumbo Hotfix Take 19 or below"
},
{
"product": "Quantum Security Gateway",
"range": "R82 with Jumbo Hotfix Take 103 or below"
},
{
"product": "Quantum Security Gateway",
"range": "R81.20 with Jumbo Hotfix Take 141 or below"
},
{
"product": "Quantum Security Gateway",
"range": "R81.10, R81, and R80.40"
},
{
"product": "Spark Firewalls",
"range": "R80.20.X, R81.10.X, and R82.00.X"
}
],
"fixed": [],
"steps": [
"利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"label": "CVE：checkpoint"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50751",
"label": "CVE公式レコード"
},
{
"url": "https://support.checkpoint.com/results/sk/sk185033",
"label": "CVE掲載の参考情報"
},
{
"url": "https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/",
"label": "CISAが示す関連情報"
},
{
"url": "https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50751",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-08T11:07:15.746Z",
"modifiedAt": "2026-08-04T03:56:11.310Z",
"fetchedAt": "2026-10-23T02:43:49.339Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.",
"sourceTitle": "User Authentication Bypass in VPN Remote Access and Mobile Access",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"product": "Quantum Security Gateway",
"vendor": "checkpoint",
"versions": [
{
"status": "affected",
"version": "R82.10 with Jumbo Hotfix Take 19 or below"
},
{
"status": "affected",
"version": "R82 with Jumbo Hotfix Take 103 or below"
},
{
"status": "affected",
"version": "R81.20 with Jumbo Hotfix Take 141 or below"
},
{
"status": "affected",
"version": "R81.10, R81, and R80.40"
}
]
},
{
"product": "Spark Firewalls",
"vendor": "checkpoint",
"versions": [
{
"status": "affected",
"version": "R80.20.X, R81.10.X, and R82.00.X"
}
]
}
],
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-50751",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"fetchedAt": "2026-10-23T02:43:49.339Z",
"publishedAt": "2026-06-08T11:07:15.746Z",
"modifiedAt": "2026-08-04T03:56:11.310Z",
"state": "published",
"provider": "checkpoint",
"title": "User Authentication Bypass in VPN Remote Access and Mobile Access",
"descriptions": [
{
"lang": "en",
"value": "A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "checkpoint",
"product": "Quantum Security Gateway",
"sourcePath": "/containers/cna/affected/0",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "R82.10 with Jumbo Hotfix Take 19 or below",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/1",
"version": "R82 with Jumbo Hotfix Take 103 or below",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/2",
"version": "R81.20 with Jumbo Hotfix Take 141 or below",
"status": "affected"
},
{
"sourcePath": "/containers/cna/affected/0/versions/3",
"version": "R81.10, R81, and R80.40",
"status": "affected"
}
]
},
{
"vendor": "checkpoint",
"product": "Spark Firewalls",
"sourcePath": "/containers/cna/affected/1",
"platforms": [],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/1/versions/0",
"version": "R80.20.X, R81.10.X, and R82.00.X",
"status": "affected"
}
]
}
],
"solutions": [],
"workarounds": [],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-287",
"lang": "en",
"description": "CWE-287: Improper Authentication.",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://support.checkpoint.com/results/sk/sk185033",
"label": "checkpoint",
"tags": [],
"provider": "checkpoint",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/",
"label": "CISA-ADP",
"tags": [
"vendor-advisory"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/1"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"product\":\"Quantum Security Gateway\",\"vendor\":\"checkpoint\",\"versions\":[{\"status\":\"affected\",\"version\":\"R82.10 with Jumbo Hotfix Take 19 or below\"},{\"status\":\"affected\",\"version\":\"R82 with Jumbo Hotfix Take 103 or below\"},{\"status\":\"affected\",\"version\":\"R81.20 with Jumbo Hotfix Take 141 or below\"},{\"status\":\"affected\",\"version\":\"R81.10, R81, and R80.40\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/affected/1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourcePath": "/containers/cna/affected/1",
"text": "{\"product\":\"Spark Firewalls\",\"vendor\":\"checkpoint\",\"versions\":[{\"status\":\"affected\",\"version\":\"R80.20.X, R81.10.X, and R82.00.X\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"cweId\":\"CWE-287\",\"description\":\"CWE-287: Improper Authentication.\",\"lang\":\"en\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourcePath": "/containers/adp/0/metrics/0/cvssV3_1",
"text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":9.3,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-08-04T03:56:11.310Z",
"fetchedAt": "2026-10-23T02:43:49.339Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-08T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"sourceSummary": "Quantum Security Gateway / Spark Firewallsに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:25.594Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "4bb129655fd1e646dc686bfd4fa92e90951f64cc07e7c0344f33879492028e05",
"sourceModifiedAt": "2026-08-04T03:56:11.310Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "リモートアクセスとモバイルアクセスの証明書検証におけるロジックフローの弱点により、廃止された IKEv1 キー交換を使用した場合、認証されていないリモート攻撃者がユーザー認証を回避し、正当なユーザーパスワードなしでリモートアクセス VPN 接続を確立できる。",
"risk": "攻撃者が認証を回避してリモートアクセス VPN に接続できるため、組織の内部ネットワークへ不正に侵入される可能性がある。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E1"
],
"applicability": [
{
"text": "Quantum Security Gateway が以下のバージョンで影響を受ける：R82.10（Jumbo Hotfix Take 19 以下）、R82（Jumbo Hotfix Take 103 以下）、R81.20（Jumbo Hotfix Take 141 以下）、R81.10、R81、R80.40。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E3",
"E2"
]
},
{
"text": "Spark Firewalls が以下のバージョンで影響を受ける：R80.20.X、R81.10.X、R82.00.X。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E4",
"E2"
]
},
{
"text": "影響は、リモートアクセスおよびモバイルアクセスで廃止された IKEv1 キー交換を使用した証明書検証に限定される。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E1",
"E2"
]
},
{
"text": "公式の対象表：checkpoint / Quantum Security Gateway。影響ありとして記載：R81.10, R81, and R80.40。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "公式の対象表：checkpoint / Spark Firewalls。影響ありとして記載：R80.20.X, R81.10.X, and R82.00.X。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751"
],
"evidenceIds": [
"E5"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Quantum Security Gateway / Spark Firewalls」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-50751",
"https://support.checkpoint.com/results/sk/sk185033",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751",
"https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/",
"https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM",
"https://nvd.nist.gov/vuln/detail/CVE-2026-50751"
]
}
],
"actions": [
{
"text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E3"
]
}
],
"temporaryMitigations": [
{
"text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-50751",
"https://support.checkpoint.com/results/sk/sk185033",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751",
"https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/",
"https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM",
"https://nvd.nist.gov/vuln/detail/CVE-2026-50751"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-50751",
"https://support.checkpoint.com/results/sk/sk185033",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751",
"https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/",
"https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM",
"https://nvd.nist.gov/vuln/detail/CVE-2026-50751"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
"今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"label": "CVE：checkpoint"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50751",
"label": "CVE公式レコード"
},
{
"url": "https://support.checkpoint.com/results/sk/sk185033",
"label": "CVE掲載の参考情報"
},
{
"url": "https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/",
"label": "CISAが示す関連情報"
},
{
"url": "https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50751",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourceField": "/containers/cna/title",
"excerpt": "User Authentication Bypass in VPN Remote Access and Mobile Access",
"language": null
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"product\":\"Quantum Security Gateway\",\"vendor\":\"checkpoint\",\"versions\":[{\"status\":\"affected\",\"version\":\"R82.10 with Jumbo Hotfix Take 19 or below\"},{\"status\":\"affected\",\"version\":\"R82 with Jumbo Hotfix Take 103 or below\"},{\"status\":\"affected\",\"version\":\"R81.20 with Jumbo Hotfix Take 141 or below\"},{\"status\":\"affected\",\"version\":\"R81.10, R81, and R80.40\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50751.json",
"sourceField": "/containers/cna/affected/1",
"excerpt": "{\"product\":\"Spark Firewalls\",\"vendor\":\"checkpoint\",\"versions\":[{\"status\":\"affected\",\"version\":\"R80.20.X, R81.10.X, and R82.00.X\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E5",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-50751",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-50751\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-50751（Quantum Security Gateway / Spark Firewalls）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Quantum Security Gateway が以下のバージョンで影響を受ける：R82.10（Jumbo Hotfix Take 19 以下）、R82（Jumbo Hotfix Take 103 以下）、R81.20（Jumbo Hotfix Take 141 以下）、R81.10、R81、R80.40。\n・Spark Firewalls が以下のバージョンで影響を受ける：R80.20.X、R81.10.X、R82.00.X。\n・影響は、リモートアクセスおよびモバイルアクセスで廃止された IKEv1 キー交換を使用した証明書検証に限定される。\n・公式の対象表：checkpoint / Quantum Security Gateway。影響ありとして記載：R81.10, R81, and R80.40。\n・公式の対象表：checkpoint / Spark Firewalls。影響ありとして記載：R80.20.X, R81.10.X, and R82.00.X。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-50751",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:25.594Z",
"lastSuccess": "2026-10-23T03:23:25.594Z",
"sourceCheckedAt": "2026-10-23T02:43:49.339Z",
"errorCode": null
},
"glossary": []
}
},
{
"id": "CVE-2026-28318",
"aliases": [],
"title": "Serv-U：サービス停止",
"summary": "SolarWinds Serv-U は、認証なしで Content-Encoding: deflate を使用した特別に細工した POST リクエストによりサービスがクラッシュする脆弱性があります。アップデートができない場合は、SolarWinds Trust Center で提供される緩和手順を利用してください。",
"risk": "Serv-U サービスがクラッシュし、利用できなくなる（サービス拒否）可能性があります。",
"product": "Serv-U",
"category": "other",
"component": "package",
"severity": "high",
"cvss": 7.5,
"cvssVersion": "3.1",
"cvssSource": "SolarWinds",
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"affected": [
{
"product": "Serv-U",
"range": "<= 15.5.4（環境: Windows / Linux）"
}
],
"fixed": [],
"steps": [
"SolarWinds Serv-U 15.5.4 Hotfix 1 にアップグレードしてください。",
"アップグレードができない場合は、提供されている緩和手順を実施してください。",
"「CVE-2026-28318」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
],
"references": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"label": "CVE：SolarWinds"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28318",
"label": "CVE公式レコード"
},
{
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318",
"label": "CVE掲載の参考情報"
},
{
"url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318",
"label": "CISAが示す関連情報"
},
{
"url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28318",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"publishedAt": "2026-06-04T14:05:58.218Z",
"modifiedAt": "2026-10-21T10:29:06.114Z",
"fetchedAt": "2026-10-23T02:43:48.167Z",
"exploitStatus": "confirmed",
"sources": [
"CVE",
"CISA KEV"
],
"originalText": "SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update",
"sourceTitle": "SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability",
"summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
"state": "published",
"affectedDetails": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux"
],
"product": "Serv-U",
"vendor": "SolarWinds",
"versions": [
{
"lessThanOrEqual": "15.5.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"configurationNotes": "対象環境・機能: Windows / Linux。製品バージョンだけでなく、原文の利用条件を照合してください。",
"officialEvidence": {
"schemaVersion": "1.0",
"id": "CVE-2026-28318",
"sourceType": "CVE",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"fetchedAt": "2026-10-23T02:43:48.167Z",
"publishedAt": "2026-06-04T14:05:58.218Z",
"modifiedAt": "2026-10-21T10:29:06.114Z",
"state": "published",
"provider": "SolarWinds",
"title": "SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability",
"descriptions": [
{
"lang": "en",
"value": "SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update",
"sourcePath": "/containers/cna/descriptions/0/value"
}
],
"affected": [
{
"vendor": "SolarWinds",
"product": "Serv-U",
"sourcePath": "/containers/cna/affected/0",
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux"
],
"modules": [],
"programFiles": [],
"cpes": [],
"programRoutines": [],
"versions": [
{
"sourcePath": "/containers/cna/affected/0/versions/0",
"version": "0",
"lessThanOrEqual": "15.5.4",
"versionType": "custom",
"status": "affected"
}
]
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to SolarWinds Serv-U 15.5.4 Hotfix 1. Use the mitigation steps until the upgrade is possible.",
"sourcePath": "/containers/cna/solutions/0/value"
}
],
"workarounds": [
{
"lang": "en",
"value": "Block any POST requests containing 'Content-Encoding: deflate'. This function is not required for SolarWinds Serv-U.",
"sourcePath": "/containers/cna/workarounds/0/value"
}
],
"exploits": [],
"rejectedReasons": [],
"problemTypes": [
{
"cweId": "CWE-400",
"lang": "en",
"description": "CWE-400 Uncontrolled Resource Consumption",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
}
],
"metrics": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"provider": "SolarWinds",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1"
}
],
"references": [
{
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318",
"label": "SolarWinds",
"tags": [],
"provider": "SolarWinds",
"sourcePath": "/containers/cna/references/0"
},
{
"url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm",
"label": "SolarWinds",
"tags": [],
"provider": "SolarWinds",
"sourcePath": "/containers/cna/references/1"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-28318",
"label": "CISA-ADP",
"tags": [
"government-resource"
],
"provider": "CISA-ADP",
"sourcePath": "/containers/adp/0/references/0"
}
],
"snippets": [
{
"evidenceId": "official:/containers/cna/affected/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourcePath": "/containers/cna/affected/0",
"text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\",\"Linux\"],\"product\":\"Serv-U\",\"vendor\":\"SolarWinds\",\"versions\":[{\"lessThanOrEqual\":\"15.5.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/descriptions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourcePath": "/containers/cna/descriptions/0/value",
"text": "SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/solutions/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourcePath": "/containers/cna/solutions/0/value",
"text": "Upgrade to SolarWinds Serv-U 15.5.4 Hotfix 1. Use the mitigation steps until the upgrade is possible.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/workarounds/0/value",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourcePath": "/containers/cna/workarounds/0/value",
"text": "Block any POST requests containing 'Content-Encoding: deflate'. This function is not required for SolarWinds Serv-U.",
"truncated": false,
"representation": "source_excerpt"
},
{
"evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
"text": "{\"cweId\":\"CWE-400\",\"description\":\"CWE-400 Uncontrolled Resource Consumption\",\"lang\":\"en\",\"type\":\"CWE\"}",
"truncated": false,
"representation": "source_json"
},
{
"evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourcePath": "/containers/cna/metrics/0/cvssV3_1",
"text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"version\":\"3.1\"}",
"truncated": false,
"representation": "source_json"
}
],
"limits": {
"completeness": "official_record",
"truncatedFields": [],
"note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
}
},
"sourceSnapshots": [
{
"source": "CVE",
"modifiedAt": "2026-10-21T10:29:06.114Z",
"fetchedAt": "2026-10-23T02:43:48.167Z",
"state": "published"
},
{
"source": "CISA KEV",
"modifiedAt": "2026-06-05T00:00:00.000Z",
"fetchedAt": "2026-10-23T02:17:50.489Z",
"state": "published"
}
],
"sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"sourceSummary": "Serv-Uにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。",
"sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。",
"guidance": {
"schemaVersion": "1.0",
"method": "automatic",
"reviewedAt": null,
"reviewState": "current",
"generatedAt": "2026-10-23T03:23:25.837Z",
"generatorVersion": "2026-10-23.3",
"sourceFingerprint": "a370fff358e7db04e824a8514d7d976ef15410398dc760727241ad1fa2460891",
"sourceModifiedAt": "2026-10-21T10:29:06.114Z",
"model": "@cf/openai/gpt-oss-120b",
"verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
"summary": "SolarWinds Serv-U は、認証なしで Content-Encoding: deflate を使用した特別に細工した POST リクエストによりサービスがクラッシュする脆弱性があります。アップデートができない場合は、SolarWinds Trust Center で提供される緩和手順を利用してください。",
"risk": "Serv-U サービスがクラッシュし、利用できなくなる（サービス拒否）可能性があります。",
"summaryEvidenceIds": [
"E1",
"E2"
],
"riskEvidenceIds": [
"E2"
],
"applicability": [
{
"text": "Windows および Linux 上の Serv-U で、バージョン 15.5.4 以下は影響を受けます。",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json"
],
"evidenceIds": [
"E3",
"E1"
]
},
{
"text": "公式の対象表：SolarWinds / Serv-U。影響ありとして記載：15.5.4以下の版。対象の環境：Windows、Linux",
"kind": "fact",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
"kind": "fact",
"sourceUrls": [
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318"
],
"evidenceIds": [
"E6"
]
}
],
"versionChecks": [
{
"text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "「Serv-U」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7",
"https://nvd.nist.gov/vuln/detail/CVE-2026-28318"
]
}
],
"actions": [
{
"text": "SolarWinds Serv-U 15.5.4 Hotfix 1 にアップグレードしてください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "アップグレードができない場合は、提供されている緩和手順を実施してください。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json"
],
"evidenceIds": [
"E4"
]
},
{
"text": "「CVE-2026-28318」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cve.org/CVERecord?id=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7",
"https://nvd.nist.gov/vuln/detail/CVE-2026-28318"
]
},
{
"text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7",
"https://nvd.nist.gov/vuln/detail/CVE-2026-28318"
]
}
],
"temporaryMitigations": [
{
"text": "Content-Encoding: deflate を含む POST リクエストをすべてブロックしてください。この機能は SolarWinds Serv-U では必須ではありません。",
"kind": "fix",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json"
],
"evidenceIds": [
"E5"
]
}
],
"verification": [
{
"text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
"kind": "procedure",
"sourceUrls": [
"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json"
],
"evidenceIds": [
"E3"
]
},
{
"text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
"kind": "procedure",
"sourceUrls": [
"https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"https://www.cve.org/CVERecord?id=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318",
"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318",
"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7",
"https://nvd.nist.gov/vuln/detail/CVE-2026-28318"
]
}
],
"unknowns": [
"この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。"
],
"sources": [
{
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"label": "CVE：SolarWinds"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318",
"label": "CISA KEV（悪用確認）"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28318",
"label": "CVE公式レコード"
},
{
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318",
"label": "CVE掲載の参考情報"
},
{
"url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm",
"label": "CVE掲載の参考情報"
},
{
"url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318",
"label": "CISAが示す関連情報"
},
{
"url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7",
"label": "CISAが示す関連情報"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28318",
"label": "CISAが示す関連情報"
},
{
"url": "https://www.first.org/cvss/v3.1/specification-document",
"label": "FIRST公式：CVSS 3.1の条件の定義"
},
{
"url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
"label": "CISA：ソフトウェア更新の基本"
}
],
"evidence": [
{
"id": "E1",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourceField": "/containers/cna/title",
"excerpt": "SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability",
"language": null
},
{
"id": "E2",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourceField": "/containers/cna/descriptions/0/value",
"excerpt": "SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E3",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourceField": "/containers/cna/affected/0",
"excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\",\"Linux\"],\"product\":\"Serv-U\",\"vendor\":\"SolarWinds\",\"versions\":[{\"lessThanOrEqual\":\"15.5.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}",
"language": null,
"representation": "source_json"
},
{
"id": "E4",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourceField": "/containers/cna/solutions/0/value",
"excerpt": "Upgrade to SolarWinds Serv-U 15.5.4 Hotfix 1. Use the mitigation steps until the upgrade is possible.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E5",
"sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28318.json",
"sourceField": "/containers/cna/workarounds/0/value",
"excerpt": "Block any POST requests containing 'Content-Encoding: deflate'. This function is not required for SolarWinds Serv-U.",
"language": "en",
"representation": "source_excerpt"
},
{
"id": "E6",
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-28318",
"sourceField": "/exploitStatus",
"excerpt": "{\"id\":\"CVE-2026-28318\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
"language": "en",
"representation": "normalized_feed_field"
}
],
"supportRequest": "件名：CVE-2026-28318（Serv-U）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows および Linux 上の Serv-U で、バージョン 15.5.4 以下は影響を受けます。\n・公式の対象表：SolarWinds / Serv-U。影響ありとして記載：15.5.4以下の版。対象の環境：Windows、Linux\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-28318",
"publicationCheckVersion": "2026-10-23.1",
"sourceNotices": [],
"automation": {
"status": "ready",
"lastAttempt": "2026-10-23T03:23:25.837Z",
"lastSuccess": "2026-10-23T03:23:25.837Z",
"sourceCheckedAt": "2026-10-23T02:43:48.167Z",
"errorCode": null
},
"glossary": [
{
"term": "POST",
"meaning": "フォームなどのデータを、相手のサーバーへ送るための通信方法です。この言葉だけで、情報漏えいや設定変更が起きたと判断するものではありません。",
"sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Methods/POST",
"kind": "general_definition"
},
{
"term": "サービス拒否（DoS）",
"meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。",
"sourceUrl": "https://cwe.mitre.org/data/definitions/400.html",
"kind": "general_definition"
}
]
}
}
],
"total": 2197,
"limit": 20,
"offset": 520,
"filters": {
"product": "all",
"type": "all",
"q": "",
"page": 27
},
"pagination": {
"page": 27,
"pageSize": 20,
"totalPages": 110
},
"sources": [
{
"name": "JVN",
"status": "ok",
"lastSuccess": "2026-10-23T20:17:49.575Z",
"lastAttempt": "2026-10-23T20:17:49.575Z",
"error": null,
"recordCount": 20,
"coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。",
"cursor": null,
"freshness": "fresh",
"stale": false
},
{
"name": "PHP Security",
"status": "error",
"lastSuccess": "2026-10-23T19:17:50.573Z",
"lastAttempt": "2026-10-23T20:17:49.575Z",
"error": "GitHub API取得上限に到達 (2026-10-23T20:37:02.000Z以降に再取得)",
"recordCount": 66,
"coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。",
"cursor": null,
"freshness": "fresh",
"stale": false
},
{
"name": "CISA KEV",
"status": "ok",
"lastSuccess": "2026-10-23T20:17:49.575Z",
"lastAttempt": "2026-10-23T20:17:49.575Z",
"error": null,
"recordCount": 1755,
"coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。",
"cursor": null,
"freshness": "fresh",
"stale": false
},
{
"name": "NVD",
"status": "ok",
"lastSuccess": "2026-10-23T19:17:50.573Z",
"lastAttempt": "2026-10-23T20:17:49.575Z",
"error": null,
"recordCount": 9,
"coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T18:02:49.704Z 〜 2026-10-23T19:17:50.573Z、全製品の変更 729/729件まで確認、対象9件反映。",
"cursor": null,
"freshness": "fresh",
"stale": false
},
{
"name": "CVE",
"status": "ok",
"lastSuccess": "2026-10-23T20:17:49.575Z",
"lastAttempt": "2026-10-23T20:17:49.575Z",
"error": null,
"recordCount": 6,
"coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。",
"cursor": null,
"freshness": "fresh",
"stale": false
}
]
}