{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-45247", "aliases": [], "title": "Full Page Cache Warmer for Magento 2：コード実行", "summary": "Mirasvit Full Page Cache Warmer for Magento 2 のバージョン 1.11.12 未満には、攻撃者が CacheWarmer クッキーに細工したシリアライズ済み PHP オブジェクトを送ることで、サーバー上で任意のコードを実行できる PHP オブジェクトインジェクションの脆弱性が存在します。", "risk": "この脆弱性が悪用されると、攻撃者はサーバー上で任意のコードを実行でき、システム全体が制御される可能性があります。", "product": "Full Page Cache Warmer for Magento 2", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "VulnCheck", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "Full Page Cache Warmer for Magento 2", "range": "< 1.11.12" }, { "product": "Full Page Cache Warmer for Magento 2", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-45247", "label": "CVE公式レコード" }, { "url": "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "label": "CVE掲載の参考情報" }, { "url": "https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer", "label": "CISAが示す関連情報" }, { "url": "https://www.vulncheck.com/advisories/mirasvit-cache-warmer-for-magento-php-object-injection", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45247", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-26T14:15:33.596Z", "modifiedAt": "2026-06-04T03:55:44.156Z", "fetchedAt": "2026-10-23T02:43:48.954Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.", "sourceTitle": "Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "vendor": "Mirasvit", "product": "Full Page Cache Warmer for Magento 2", "versions": [ { "status": "affected", "version": "0", "versionType": "semver", "lessThan": "1.11.12" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-45247", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "fetchedAt": "2026-10-23T02:43:48.954Z", "publishedAt": "2026-05-26T14:15:33.596Z", "modifiedAt": "2026-06-04T03:55:44.156Z", "state": "published", "provider": "VulnCheck", "title": "Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection", "descriptions": [ { "lang": "en", "value": "Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Mirasvit", "product": "Full Page Cache Warmer for Magento 2", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "1.11.12", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "label": "VulnCheck", "tags": [ "technical-description" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/0" }, { "url": "https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer", "label": "VulnCheck", "tags": [ "release-notes", "patch" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.vulncheck.com/advisories/mirasvit-cache-warmer-for-magento-php-object-injection", "label": "VulnCheck", "tags": [ "third-party-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.imperva.com/blog/imperva-customers-protected-against-cve-2026-45247-in-mirasvit-full-page-cache-warmer-for-magento/", "label": "CISA-ADP", "tags": [ "media-coverage" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45247", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"vendor\":\"Mirasvit\",\"product\":\"Full Page Cache Warmer for Magento 2\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\",\"lessThan\":\"1.11.12\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-502\",\"description\":\"Deserialization of Untrusted Data\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.3,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"version\":\"3.1\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-06-04T03:55:44.156Z", "fetchedAt": "2026-10-23T02:43:48.954Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-06-03T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Full Page Cache Warmer for Magento 2にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:25.907Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "80e2cf9dfbd4737b6a18195ddb3b18f50d4060d415e3df02c7a71458496d43db", "sourceModifiedAt": "2026-06-04T03:55:44.156Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Mirasvit Full Page Cache Warmer for Magento 2 のバージョン 1.11.12 未満には、攻撃者が CacheWarmer クッキーに細工したシリアライズ済み PHP オブジェクトを送ることで、サーバー上で任意のコードを実行できる PHP オブジェクトインジェクションの脆弱性が存在します。", "risk": "この脆弱性が悪用されると、攻撃者はサーバー上で任意のコードを実行でき、システム全体が制御される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象製品は Mirasvit の Full Page Cache Warmer for Magento 2 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "バージョン 1.11.12 未満が影響を受けます（バージョン 0 はプレースホルダーであり、実際のリリースではありません）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "攻撃者は認証されていなくても利用可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃には、CacheWarmer クッキーに細工したシリアライズ済み PHP オブジェクトを設定する必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "製品は PHP の組み込み関数 unserialize() を制限なく呼び出すため、外部から提供されたデータが直接デシリアライズされます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Magento 本体およびその依存ライブラリに存在するガジェットチェーンを利用して、任意コードが実行されます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Mirasvit / Full Page Cache Warmer for Magento 2。影響ありとして記載：1.11.12未満の版。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Full Page Cache Warmer for Magento 2」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-45247", "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer", "https://www.vulncheck.com/advisories/mirasvit-cache-warmer-for-magento-php-object-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247", "https://nvd.nist.gov/vuln/detail/CVE-2026-45247" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-45247", "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer", "https://www.vulncheck.com/advisories/mirasvit-cache-warmer-for-magento-php-object-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247", "https://nvd.nist.gov/vuln/detail/CVE-2026-45247" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-45247", "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer", "https://www.vulncheck.com/advisories/mirasvit-cache-warmer-for-magento-php-object-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247", "https://nvd.nist.gov/vuln/detail/CVE-2026-45247" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "公式タイトルにある名称は「Mirasvit Cache Warmer for Magento」、対象データの製品名は「Full Page Cache Warmer for Magento 2」です。同じ製品の別名かどうかは、この表記だけで決めず、開発元・製品識別子も添えて照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-45247", "label": "CVE公式レコード" }, { "url": "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "label": "CVE掲載の参考情報" }, { "url": "https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer", "label": "CISAが示す関連情報" }, { "url": "https://www.vulncheck.com/advisories/mirasvit-cache-warmer-for-magento-php-object-injection", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45247", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourceField": "/containers/cna/title", "excerpt": "Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45247.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"vendor\":\"Mirasvit\",\"product\":\"Full Page Cache Warmer for Magento 2\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\",\"lessThan\":\"1.11.12\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45247", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-45247\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-45247（Full Page Cache Warmer for Magento 2）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は Mirasvit の Full Page Cache Warmer for Magento 2 です。\n・バージョン 1.11.12 未満が影響を受けます（バージョン 0 はプレースホルダーであり、実際のリリースではありません）。\n・攻撃者は認証されていなくても利用可能です。\n・攻撃には、CacheWarmer クッキーに細工したシリアライズ済み PHP オブジェクトを設定する必要があります。\n・製品は PHP の組み込み関数 unserialize() を制限なく呼び出すため、外部から提供されたデータが直接デシリアライズされます。\n・Magento 本体およびその依存ライブラリに存在するガジェットチェーンを利用して、任意コードが実行されます。\n・公式の対象表：Mirasvit / Full Page Cache Warmer for Magento 2。影響ありとして記載：1.11.12未満の版。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-45247", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:25.907Z", "lastSuccess": "2026-10-23T03:23:25.907Z", "sourceCheckedAt": "2026-10-23T02:43:48.954Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2022-0492", "aliases": [], "title": "kernel：脆弱性情報", "summary": "Linux カーネルの kernel/cgroup/cgroup‑v1.c にある cgroup_release_agent_write 関数に脆弱性が見つかりました。この欠陥は特定の条件下で、cgroups v1 の release_agent 機能を利用して権限を昇格させ、名前空間の分離を予期せず回避できるようになります。", "risk": "攻撃者が権限昇格し、名前空間の分離を回避できる可能性があります。", "product": "kernel", "category": "linux", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "redhat", "cvssVector": null, "affected": [ { "product": "kernel", "range": "kernel 5.17 rc3" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0492", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-0492", "label": "CVE公式レコード" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2051505", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af", "label": "CISAが示す関連情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html", "label": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update" }, { "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html", "label": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update" }, { "url": "https://www.debian.org/security/2022/dsa-5095", "label": "DSA-5095" }, { "url": "https://www.debian.org/security/2022/dsa-5096", "label": "DSA-5096" }, { "url": "http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20220419-0002/", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.kernel.org/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0492", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2022-03-03T00:00:00.000Z", "modifiedAt": "2026-06-03T03:55:20.847Z", "fetchedAt": "2026-10-23T02:43:20.333Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "kernel", "versions": [ { "version": "kernel 5.17 rc3", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-0492", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "fetchedAt": "2026-10-23T02:43:20.333Z", "publishedAt": "2022-03-03T00:00:00.000Z", "modifiedAt": "2026-06-03T03:55:20.847Z", "state": "published", "provider": "redhat", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "kernel", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "kernel 5.17 rc3", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-287", "lang": "en", "description": "CWE-287", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2051505", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html", "label": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update", "tags": [ "mailing-list", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html", "label": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update", "tags": [ "mailing-list", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.debian.org/security/2022/dsa-5095", "label": "DSA-5095", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://www.debian.org/security/2022/dsa-5096", "label": "DSA-5096", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://security.netapp.com/advisory/ntap-20220419-0002/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0492", "label": "CISA KEV", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"kernel\",\"versions\":[{\"version\":\"kernel 5.17 rc3\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"lang\":\"en\",\"description\":\"CWE-287\",\"cweId\":\"CWE-287\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-06-03T03:55:20.847Z", "fetchedAt": "2026-10-23T02:43:20.333Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-06-02T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "kernelに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:26.814Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ecc5b30a1c0205d0e0277f805269893b65778109ee15d2eebcc49c4011d78e46", "sourceModifiedAt": "2026-06-03T03:55:20.847Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Linux カーネルの kernel/cgroup/cgroup‑v1.c にある cgroup_release_agent_write 関数に脆弱性が見つかりました。この欠陥は特定の条件下で、cgroups v1 の release_agent 機能を利用して権限を昇格させ、名前空間の分離を予期せず回避できるようになります。", "risk": "攻撃者が権限昇格し、名前空間の分離を回避できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Linux カーネルのバージョン \"kernel 5.17 rc3\" が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json" ], "evidenceIds": [ "E2" ] }, { "text": "cgroups v1 の release_agent 機能を使用している環境でこの脆弱性が利用可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：kernel。影響ありとして記載：kernel 5.17 rc3。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0492" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json" ], "evidenceIds": [ "E2" ] }, { "text": "管理担当者に、Linuxの種類（Ubuntu、Red Hatなど）と版、対象パッケージ名、配布元を含む完全なパッケージ番号を確認してもらいます。OSの種類や製品の上流の番号だけで、影響の有無を決めないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "更新が用意されていない場合は、配布元や保守会社へCVE番号とパッケージ番号を送り、影響の有無・回避策・提供予定を確認します。他のLinux向けの修正をそのまま入れないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json" ], "evidenceIds": [ "E2" ] }, { "text": "修正後の完全なパッケージ番号と、その配布元のCVE対応表を照合します。古い番号のまま修正を取り込む場合があるため、数字が小さいという理由だけで未修正とは扱いません。管理者に必要な再起動の完了も確認してもらってください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0492", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-0492", "label": "CVE公式レコード" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2051505", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af", "label": "CISAが示す関連情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html", "label": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update" }, { "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html", "label": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update" }, { "url": "https://www.debian.org/security/2022/dsa-5095", "label": "DSA-5095" }, { "url": "https://www.debian.org/security/2022/dsa-5096", "label": "DSA-5096" }, { "url": "http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20220419-0002/", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.kernel.org/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0492", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0492.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"kernel\",\"versions\":[{\"version\":\"kernel 5.17 rc3\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0492", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-0492\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-0492（kernel）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Linux カーネルのバージョン \"kernel 5.17 rc3\" が影響を受けます。\n・cgroups v1 の release_agent 機能を使用している環境でこの脆弱性が利用可能です。\n・公式の対象表：kernel。影響ありとして記載：kernel 5.17 rc3。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-0492", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:26.814Z", "lastSuccess": "2026-10-23T03:23:26.814Z", "sourceCheckedAt": "2026-10-23T02:43:20.333Z", "errorCode": null }, "glossary": [ { "term": "権限昇格", "meaning": "本来その利用者には許可されていない、より強い権限で操作できるようになることです。必要な元の権限と、得られる権限を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/269.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-48595", "aliases": [], "title": "Android：脆弱性情報", "summary": "複数の場所で整数オーバーフローが原因でコード実行が可能になる可能性があります。これにより、追加の実行権限なしでローカルで権限昇格が起こります。悪用にはユーザー操作は不要です。", "risk": "ローカルで権限が昇格し、攻撃者が本来持っていない権限で操作できるようになる可能性があります。", "product": "Android", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "google_android", "cvssVector": null, "affected": [ { "product": "Android", "range": "16-qpr2" }, { "product": "Android", "range": "16" }, { "product": "Android", "range": "15" }, { "product": "Android", "range": "14" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "label": "CVE：google_android" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-48595", "label": "CVE公式レコード" }, { "url": "https://source.android.com/docs/security/bulletin/2026/2026-06-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48595", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-06-01T21:14:49.921Z", "modifiedAt": "2026-06-03T03:55:19.122Z", "fetchedAt": "2026-10-23T02:43:38.785Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Android", "versions": [ { "version": "16-qpr2", "status": "affected" }, { "version": "16", "status": "affected" }, { "version": "15", "status": "affected" }, { "version": "14", "status": "affected" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-48595", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "fetchedAt": "2026-10-23T02:43:38.785Z", "publishedAt": "2026-06-01T21:14:49.921Z", "modifiedAt": "2026-06-03T03:55:19.122Z", "state": "published", "provider": "google_android", "title": "", "descriptions": [ { "lang": "en", "value": "In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Google", "product": "Android", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "16-qpr2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "14", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Elevation of privilege", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://source.android.com/docs/security/bulletin/2026/2026-06-01", "label": "google_android", "tags": [], "provider": "google_android", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48595", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"16-qpr2\",\"status\":\"affected\"},{\"version\":\"16\",\"status\":\"affected\"},{\"version\":\"15\",\"status\":\"affected\"},{\"version\":\"14\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Elevation of privilege\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.4,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-06-03T03:55:19.122Z", "fetchedAt": "2026-10-23T02:43:38.785Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-06-02T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Androidに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:26.869Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a872e58fb51cc2025738cac26caf22a96ba93e6e742aae14da148ee23a974b83", "sourceModifiedAt": "2026-06-03T03:55:19.122Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "複数の場所で整数オーバーフローが原因でコード実行が可能になる可能性があります。これにより、追加の実行権限なしでローカルで権限昇格が起こります。悪用にはユーザー操作は不要です。", "risk": "ローカルで権限が昇格し、攻撃者が本来持っていない権限で操作できるようになる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "Android 14 が影響を受けています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] }, { "text": "Android 15 が影響を受けています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] }, { "text": "Android 16 が影響を受けています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] }, { "text": "Android 16‑qpr2 が影響を受けています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] }, { "text": "悪用にはユーザーの操作は不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃はローカルで実行され、追加の実行権限は不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Google / Android。影響ありとして記載：16-qpr2。影響ありとして記載：16。影響ありとして記載：15。影響ありとして記載：14。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Android」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-48595", "https://source.android.com/docs/security/bulletin/2026/2026-06-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595", "https://nvd.nist.gov/vuln/detail/CVE-2025-48595" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-48595", "https://source.android.com/docs/security/bulletin/2026/2026-06-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595", "https://nvd.nist.gov/vuln/detail/CVE-2025-48595" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-48595", "https://source.android.com/docs/security/bulletin/2026/2026-06-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595", "https://nvd.nist.gov/vuln/detail/CVE-2025-48595" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "label": "CVE：google_android" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-48595", "label": "CVE公式レコード" }, { "url": "https://source.android.com/docs/security/bulletin/2026/2026-06-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48595", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Elevation of privilege\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48595.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"16-qpr2\",\"status\":\"affected\"},{\"version\":\"16\",\"status\":\"affected\"},{\"version\":\"15\",\"status\":\"affected\"},{\"version\":\"14\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48595", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-48595\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-48595（Android）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Android 14 が影響を受けています。\n・Android 15 が影響を受けています。\n・Android 16 が影響を受けています。\n・Android 16‑qpr2 が影響を受けています。\n・悪用にはユーザーの操作は不要です。\n・攻撃はローカルで実行され、追加の実行権限は不要です。\n・公式の対象表：Google / Android。影響ありとして記載：16-qpr2。影響ありとして記載：16。影響ありとして記載：15。影響ありとして記載：14。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-48595", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:26.869Z", "lastSuccess": "2026-10-23T03:23:26.869Z", "sourceCheckedAt": "2026-10-23T02:43:38.785Z", "errorCode": null }, "glossary": [ { "term": "権限昇格", "meaning": "本来その利用者には許可されていない、より強い権限で操作できるようになることです。必要な元の権限と、得られる権限を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/269.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-21182", "aliases": [], "title": "WebLogic Server：脆弱性情報", "summary": "Oracle Fusion Middleware の Oracle WebLogic Server（Core コンポーネント）において、バージョン 12.2.1.4.0 と 14.1.1.0.0 が影響を受けます。ネットワーク経由で T3 や IIOP にアクセスできる認証されていない攻撃者が容易に悪用でき、Oracle WebLogic Server を侵害する可能性があります。攻撃が成功すると、機密性の高いデータへの不正アクセスや、Oracle WebLogic Server が保持するすべてのデータへの完全なアクセスが可能になります。", "risk": "攻撃が成功すると、機密性の高いデータへの不正アクセス、または Oracle WebLogic Server が保持するすべてのデータへの完全なアクセスが可能になります。", "product": "WebLogic Server", "category": "other", "component": "package", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "oracle", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "WebLogic Server", "range": "12.2.1.4.0" }, { "product": "WebLogic Server", "range": "14.1.1.0.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "label": "CVE：oracle" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-21182", "label": "CVE公式レコード" }, { "url": "https://www.oracle.com/security-alerts/cpujul2024.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21182", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-16T22:40:11.035Z", "modifiedAt": "2026-06-02T03:55:36.699Z", "fetchedAt": "2026-10-23T02:43:30.511Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Oracle Corporation", "product": "WebLogic Server", "versions": [ { "version": "12.2.1.4.0", "status": "affected" }, { "version": "14.1.1.0.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-21182", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "fetchedAt": "2026-10-23T02:43:30.511Z", "publishedAt": "2024-07-16T22:40:11.035Z", "modifiedAt": "2026-06-02T03:55:36.699Z", "state": "published", "provider": "oracle", "title": "", "descriptions": [ { "lang": "en-US", "value": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Oracle Corporation", "product": "WebLogic Server", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.2.1.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "14.1.1.0.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en-US", "description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "oracle", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpujul2024.html", "label": "Oracle Advisory", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21182", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Oracle Corporation\",\"product\":\"WebLogic Server\",\"versions\":[{\"version\":\"12.2.1.4.0\",\"status\":\"affected\"},{\"version\":\"14.1.1.0.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en-US\",\"description\":\"Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-06-02T03:55:36.699Z", "fetchedAt": "2026-10-23T02:43:30.511Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-06-01T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "WebLogic Serverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:28.852Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0292a16edf22554de3d0a191b0057ba2a3958fa984d368199a9b014ad3c762f7", "sourceModifiedAt": "2026-06-02T03:55:36.699Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Oracle Fusion Middleware の Oracle WebLogic Server（Core コンポーネント）において、バージョン 12.2.1.4.0 と 14.1.1.0.0 が影響を受けます。ネットワーク経由で T3 や IIOP にアクセスできる認証されていない攻撃者が容易に悪用でき、Oracle WebLogic Server を侵害する可能性があります。攻撃が成功すると、機密性の高いデータへの不正アクセスや、Oracle WebLogic Server が保持するすべてのデータへの完全なアクセスが可能になります。", "risk": "攻撃が成功すると、機密性の高いデータへの不正アクセス、または Oracle WebLogic Server が保持するすべてのデータへの完全なアクセスが可能になります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象製品は Oracle WebLogic Server の Core コンポーネントです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 12.2.1.4.0 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E3" ] }, { "text": "バージョン 14.1.1.0.0 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E3" ] }, { "text": "ネットワーク経由で T3 プロトコルにアクセスできる場合に攻撃が可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E1" ] }, { "text": "ネットワーク経由で IIOP プロトコルにアクセスできる場合に攻撃が可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は認証不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Oracle Corporation / WebLogic Server。影響ありとして記載：12.2.1.4.0。影響ありとして記載：14.1.1.0.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E3" ] }, { "text": "「WebLogic Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-21182", "https://www.oracle.com/security-alerts/cpujul2024.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182", "https://nvd.nist.gov/vuln/detail/CVE-2024-21182" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-21182", "https://www.oracle.com/security-alerts/cpujul2024.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182", "https://nvd.nist.gov/vuln/detail/CVE-2024-21182" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-21182", "https://www.oracle.com/security-alerts/cpujul2024.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182", "https://nvd.nist.gov/vuln/detail/CVE-2024-21182" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "label": "CVE：oracle" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-21182", "label": "CVE公式レコード" }, { "url": "https://www.oracle.com/security-alerts/cpujul2024.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21182", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en-US\",\"description\":\"Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21182.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Oracle Corporation\",\"product\":\"WebLogic Server\",\"versions\":[{\"version\":\"12.2.1.4.0\",\"status\":\"affected\"},{\"version\":\"14.1.1.0.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-21182\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-21182（WebLogic Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は Oracle WebLogic Server の Core コンポーネントです。\n・バージョン 12.2.1.4.0 が影響を受けます。\n・バージョン 14.1.1.0.0 が影響を受けます。\n・ネットワーク経由で T3 プロトコルにアクセスできる場合に攻撃が可能です。\n・ネットワーク経由で IIOP プロトコルにアクセスできる場合に攻撃が可能です。\n・攻撃者は認証不要です。\n・公式の対象表：Oracle Corporation / WebLogic Server。影響ありとして記載：12.2.1.4.0。影響ありとして記載：14.1.1.0.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-21182", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:28.852Z", "lastSuccess": "2026-10-23T03:23:28.852Z", "sourceCheckedAt": "2026-10-23T02:43:30.511Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-0257", "aliases": [], "title": "Cloud NGFW / PAN-OS / Prisma Access：認証の回避", "summary": "Palo Alto Networks PAN-OS の GlobalProtect ポータルとゲートウェイに認証バイパスの脆弱性があり、攻撃者はセキュリティ制限を回避して不正な VPN 接続を確立できる。Panorama と Cloud NGFW は影響を受けない。", "risk": "攻撃者が認証を回避し、許可されていない VPN 接続を確立できる。", "product": "Cloud NGFW / PAN-OS / Prisma Access", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "4.0", "cvssSource": "palo_alto", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/AU:N/R:A/V:D/RE:M/U:Red", "affected": [ { "product": "PAN-OS", "range": ">= 12.1.0 / < 12.1.7, 12.1.4-h6 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 12.1.7から影響なし, 12.1.4-h6から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.2.0 / < 11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.2.12から影響なし, 11.2.10-h7から影響なし, 11.2.7-h14から影響なし, 11.2.4-h17から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.1.0 / < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.1.15から影響なし, 11.1.13-h5から影響なし, 11.1.10-h25から影響なし, 11.1.7-h6から影響なし, 11.1.6-h32から影響なし, 11.1.4-h33から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 10.2.0 / < 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 10.2.18-h6から影響なし, 10.2.16-h7から影響なし, 10.2.13-h21から影響なし, 10.2.10-h36から影響なし, 10.2.7-h34から影響なし。版の順序・条件は原文確認）" }, { "product": "Prisma Access", "range": ">= 10.2.0 / < 10.2.10-h36 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 10.2.10-h36から影響なし。版の順序・条件は原文確認）" }, { "product": "Prisma Access", "range": ">= 11.2.0 / < 11.2.7-h13 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.2.7-h13から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0257", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-0257", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2026-0257", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0257", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-13T18:15:10.172Z", "modifiedAt": "2026-10-15T01:11:26.182Z", "fetchedAt": "2026-10-23T02:43:40.548Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\n\nPanorama and Cloud NGFW are not impacted by these issues.", "sourceTitle": "PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "versions": [ { "status": "unaffected", "version": "All", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Palo Alto Networks", "product": "PAN-OS", "versions": [ { "status": "affected", "version": "12.1.0", "lessThan": "12.1.7, 12.1.4-h6", "changes": [ { "at": "12.1.7", "status": "unaffected" }, { "at": "12.1.4-h6", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "11.2.0", "lessThan": "11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17", "changes": [ { "at": "11.2.12", "status": "unaffected" }, { "at": "11.2.10-h7", "status": "unaffected" }, { "at": "11.2.7-h14", "status": "unaffected" }, { "at": "11.2.4-h17", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "11.1.0", "lessThan": "11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33", "changes": [ { "at": "11.1.15", "status": "unaffected" }, { "at": "11.1.13-h5", "status": "unaffected" }, { "at": "11.1.10-h25", "status": "unaffected" }, { "at": "11.1.7-h6", "status": "unaffected" }, { "at": "11.1.6-h32", "status": "unaffected" }, { "at": "11.1.4-h33", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "10.2.0", "lessThan": "10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34", "changes": [ { "at": "10.2.18-h6", "status": "unaffected" }, { "at": "10.2.16-h7", "status": "unaffected" }, { "at": "10.2.13-h21", "status": "unaffected" }, { "at": "10.2.10-h36", "status": "unaffected" }, { "at": "10.2.7-h34", "status": "unaffected" } ], "versionType": "custom" } ], "defaultStatus": "unaffected", "cpes": [ "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*" ] }, { "vendor": "Palo Alto Networks", "product": "Prisma Access", "versions": [ { "status": "affected", "version": "10.2.0", "lessThan": "10.2.10-h36", "changes": [ { "at": "10.2.10-h36", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "11.2.0", "lessThan": "11.2.7-h13", "changes": [ { "at": "11.2.7-h13", "status": "unaffected" } ], "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-0257", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "fetchedAt": "2026-10-23T02:43:40.548Z", "publishedAt": "2026-05-13T18:15:10.172Z", "modifiedAt": "2026-10-15T01:11:26.182Z", "state": "published", "provider": "palo_alto", "title": "PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities", "descriptions": [ { "lang": "en", "value": "Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\n\nPanorama and Cloud NGFW are not impacted by these issues.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "All", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "Palo Alto Networks", "product": "PAN-OS", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "12.1.0", "lessThan": "12.1.7, 12.1.4-h6", "versionType": "custom", "status": "affected", "changes": [ { "at": "12.1.7", "status": "unaffected" }, { "at": "12.1.4-h6", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "11.2.0", "lessThan": "11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.2.12", "status": "unaffected" }, { "at": "11.2.10-h7", "status": "unaffected" }, { "at": "11.2.7-h14", "status": "unaffected" }, { "at": "11.2.4-h17", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "11.1.0", "lessThan": "11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.1.15", "status": "unaffected" }, { "at": "11.1.13-h5", "status": "unaffected" }, { "at": "11.1.10-h25", "status": "unaffected" }, { "at": "11.1.7-h6", "status": "unaffected" }, { "at": "11.1.6-h32", "status": "unaffected" }, { "at": "11.1.4-h33", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "10.2.0", "lessThan": "10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34", "versionType": "custom", "status": "affected", "changes": [ { "at": "10.2.18-h6", "status": "unaffected" }, { "at": "10.2.16-h7", "status": "unaffected" }, { "at": "10.2.13-h21", "status": "unaffected" }, { "at": "10.2.10-h36", "status": "unaffected" }, { "at": "10.2.7-h34", "status": "unaffected" } ] } ] }, { "vendor": "Palo Alto Networks", "product": "Prisma Access", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.2.0", "lessThan": "10.2.10-h36", "versionType": "custom", "status": "affected", "changes": [ { "at": "10.2.10-h36", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "11.2.0", "lessThan": "11.2.7-h13", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.2.7-h13", "status": "unaffected" } ] } ] } ], "solutions": [ { "lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\nCloud NGFW All\nNo action needed.\n PAN-OS 12.1\n\n 12.1.5 through 12.1.6\n Upgrade to 12.1.7 or later.\n \n \n 12.1.2 through 12.1.4-h*\n Upgrade to 12.1.4-h6 or 12.1.7 or later.\n \n PAN-OS 11.2\n\n 11.2.11 or later\n Upgrade to 11.2.12 or later.\n \n \n 11.2.8 through 11.2.10-h*\n Upgrade to 11.2.10-h7 or 11.2.12 or later.\n \n \n 11.2.5 through 11.2.7-h*\n Upgrade to 11.2.7-h14 or 11.2.12 or later.\n \n \n 11.2.0 through 11.2.4-h*\n Upgrade to 11.2.4-h17 or 11.2.12 or later.\n \n PAN-OS 11.1\n\n 11.1.14 or later\n Upgrade to 11.1.15 or later.\n \n \n 11.1.11 through 11.1.13-h*\n Upgrade to 11.1.13-h5 or 11.1.15 or later.\n \n \n 11.1.8 through 11.1.10-h*\n Upgrade to 11.1.10-h25 or 11.1.15 or later.\n \n \n 11.1.7 through 11.1.7-h*\n Upgrade to 11.1.7-h6 or 11.1.15 or later.\n \n \n 11.1.5 through 11.1.6-h*\n Upgrade to 11.1.6-h32 or 11.1.15 or later.\n \n \n 11.1.0 through 11.1.4-h*\n Upgrade to 11.1.4-h33 or 11.1.15 or later.\n \n PAN-OS 10.2\n\n 10.2.17 through 10.2.18-h*\n Upgrade to 10.2.18 or 10.2.18-h6 or later.\n \n \n 10.2.14 through 10.2.16-h*\n Upgrade to 10.2.16-h7 or 10.2.18 or later.\n \n \n 10.2.11 through 10.2.13-h*\n Upgrade to 10.2.13-h21 or 10.2.18 or later.\n \n \n 10.2.8 through 10.2.10-h*\n Upgrade to 10.2.10-h36 or 10.2.18 or later.\n \n \n 10.2.0 through 10.2.7-h*\n Upgrade to 10.2.7-h34 or 10.2.18 or later.\n All older\nunsupported\nPAN-OS versions Upgrade to a supported fixed version.\n Prisma Access 10.2\n\n 10.2.0 through 10.2.10-h*\n Upgrade to 10.2.10-h36 or later.\n \n Prisma Access 11.2\n\n 11.2.0 through 11.2.7-h*\n Upgrade to 11.2.7-h13 or later.", "sourcePath": "/containers/cna/solutions/0/value" }, { "lang": "en", "value": "Note: With this fix, if the firewall is configured to use an authentication override cookie for the GlobalProtect Portal or Gateway, it will regenerate the cookie using a more secure method. Therefore, GP users will need to re-authenticate after a PAN-OS upgrade, even if a valid cookie is present. This is a one time requirement. Once they re-authenticate after the upgrade, the authentication override cookie and its validity will work as they do today.", "sourcePath": "/containers/cna/solutions/1/value" } ], "workarounds": [ { "lang": "eng", "value": "Customers can mitigate the risk of this issue by taking any of the following actions:\n\n\n\n\n\n * Use a dedicated certificate for Authentication Override cookies: Generate a new certificate exclusively for authentication override cookies and store it securely. Do not reuse the portal or gateway certificate, and do not share this certificate with other features or users.\n * Disable Authentication Override: Uncheck the Authentication Override options (for generating and accepting cookies) in the GlobalProtect portal and gateway configuration.", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [ { "lang": "en", "value": "Palo Alto Networks has become aware of limited exploit attempts on unpatched PAN-OS devices without mitigations applied.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-565", "lang": "en", "description": "CWE-565 Reliance on Cookies without Validation and Integrity Checking", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/AU:N/R:A/V:D/RE:M/U:Red", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "palo_alto", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://security.paloaltonetworks.com/CVE-2026-0257", "label": "palo_alto", "tags": [ "vendor-advisory" ], "provider": "palo_alto", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Cloud NGFW\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"PAN-OS\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.1.0\",\"lessThan\":\"12.1.7, 12.1.4-h6\",\"changes\":[{\"at\":\"12.1.7\",\"status\":\"unaffected\"},{\"at\":\"12.1.4-h6\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17\",\"changes\":[{\"at\":\"11.2.12\",\"status\":\"unaffected\"},{\"at\":\"11.2.10-h7\",\"status\":\"unaffected\"},{\"at\":\"11.2.7-h14\",\"status\":\"unaffected\"},{\"at\":\"11.2.4-h17\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.1.0\",\"lessThan\":\"11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33\",\"changes\":[{\"at\":\"11.1.15\",\"status\":\"unaffected\"},{\"at\":\"11.1.13-h5\",\"status\":\"unaffected\"},{\"at\":\"11.1.10-h25\",\"status\":\"unaffected\"},{\"at\":\"11.1.7-h6\",\"status\":\"unaffected\"},{\"at\":\"11.1.6-h32\",\"status\":\"unaffected\"},{\"at\":\"11.1.4-h33\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34\",\"changes\":[{\"at\":\"10.2.18-h6\",\"status\":\"unaffected\"},{\"at\":\"10.2.16-h7\",\"status\":\"unaffected\"},{\"at\":\"10.2.13-h21\",\"status\":\"unaffected\"},{\"at\":\"10.2.10-h36\",\"status\":\"unaffected\"},{\"at\":\"10.2.7-h34\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Prisma Access\",\"versions\":[{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.10-h36\",\"changes\":[{\"at\":\"10.2.10-h36\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.7-h13\",\"changes\":[{\"at\":\"11.2.7-h13\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\n\nPanorama and Cloud NGFW are not impacted by these issues.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Version\nMinor Version\nSuggested Solution\nCloud NGFW All\nNo action needed.\n PAN-OS 12.1\n\n 12.1.5 through 12.1.6\n Upgrade to 12.1.7 or later.\n \n \n 12.1.2 through 12.1.4-h*\n Upgrade to 12.1.4-h6 or 12.1.7 or later.\n \n PAN-OS 11.2\n\n 11.2.11 or later\n Upgrade to 11.2.12 or later.\n \n \n 11.2.8 through 11.2.10-h*\n Upgrade to 11.2.10-h7 or 11.2.12 or later.\n \n \n 11.2.5 through 11.2.7-h*\n Upgrade to 11.2.7-h14 or 11.2.12 or later.\n \n \n 11.2.0 through 11.2.4-h*\n Upgrade to 11.2.4-h17 or 11.2.12 or later.\n \n PAN-OS 11.1\n\n 11.1.14 or later\n Upgrade to 11.1.15 or later.\n \n \n 11.1.11 through 11.1.13-h*\n Upgrade to 11.1.13-h5 or 11.1.15 or later.\n \n \n 11.1.8 through 11.1.10-h*\n Upgrade to 11.1.10-h25 or 11.1.15 or later.\n \n \n 11.1.7 through 11.1.7-h*\n Upgrade to 11.1.7-h6 or 11.1.15 or later.\n \n \n 11.1.5 through 11.1.6-h*\n Upgrade to 11.1.6-h32 or 11.1.15 or later.\n \n \n 11.1.0 through 11.1.4-h*\n Upgrade to 11.1.4-h33 or 11.1.15 or later.\n \n PAN-OS 10.2\n\n 10.2.17 through 10.2.18-h*\n Upgrade to 10.2.18 or 10.2.18-h6 or later.\n \n \n 10.2.14 through 10.2.16-h*\n Upgrade to 10.2.16-h7 or 10.2.18 or later.\n \n \n 10.2.11 through 10.2.13-h*\n Upgrade to 10.2.13-h21 or 10.2.18 or later.\n \n \n 10.2.8 through 10.2.10-h*\n Upgrade to 10.2.10-h36 or 10.2.18 or later.\n \n \n 10.2.0 through 10.2.7-h*\n Upgrade to 10.2.7-h34 or 10.2.18 or later.\n All older\nunsupported\nPAN-OS versions Upgrade to a supported fixed version.\n Prisma Access 10.2\n\n 10.2.0 through 10.2.10-h*\n Upgrade to 10.2.10-h36 or later.\n \n Prisma Access 11.2\n\n 11.2.0 through 11.2.7-h*\n Upgrade to 11.2.7-h13 or later.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/1/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/solutions/1/value", "text": "Note: With this fix, if the firewall is configured to use an authentication override cookie for the GlobalProtect Portal or Gateway, it will regenerate the cookie using a more secure method. Therefore, GP users will need to re-authenticate after a PAN-OS upgrade, even if a valid cookie is present. This is a one time requirement. Once they re-authenticate after the upgrade, the authentication override cookie and its validity will work as they do today.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Customers can mitigate the risk of this issue by taking any of the following actions:\n\n\n\n\n\n * Use a dedicated certificate for Authentication Override cookies: Generate a new certificate exclusively for authentication override cookies and store it securely. Do not reuse the portal or gateway certificate, and do not share this certificate with other features or users.\n * Disable Authentication Override: Uncheck the Authentication Override options (for generating and accepting cookies) in the GlobalProtect portal and gateway configuration.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Palo Alto Networks has become aware of limited exploit attempts on unpatched PAN-OS devices without mitigations applied.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-565\",\"description\":\"CWE-565 Reliance on Cookies without Validation and Integrity Checking\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"LOW\",\"subConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"subIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"ATTACKED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NO\",\"Recovery\":\"AUTOMATIC\",\"valueDensity\":\"DIFFUSE\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"RED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/AU:N/R:A/V:D/RE:M/U:Red\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "sourcePath": "body:advisory", "text": "SSA-967325\n\nSiemens Security Advisory by Siemens ProductCERT\n\nSSA-967325: Multiple Vulnerabilities in Palo Alto Networks PAN-OS before V11.2.10-h7 on RUGGEDCOM APE1808 Devices\n\nPublication Date:\n\n2026-05-12\n\nLast Update:\n\n2026-10-13\n\nCurrent Version:\n\nV1.3\n\nCVSS v3.1 Base Score:\n10.0\n\nCVSS v4.0 Base Score:\n9.3\n\nSUMMARY\n\nPalo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.\n\nSiemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications.\n\n[1] https://security.paloaltonetworks.com/\n\nKNOWN AFFECTED PRODUCTS\n\nUn-/Collapse All\n\nAffected Product and Versions\nRemediation\n\nExpand children\n\nRUGGEDCOM APE1808\n\nShow more details\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with User-ID™ Authentication Portal configured and interface management profile with response pages enabled\n\naffected by\n\nCVE-2026-0300\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-0256\n\nCVE-2026-0261\n\nCVE-2026-0262\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with GlobalProtect portal or gateway configured when authentication override cookies are enabled and a specific certificate configuration exists\n\naffected by\n\nCVE-2026-0257\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h7. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with a PAN-OS Site-to-Site VPN Gateway with IKEv2 configured\n\naffected by\n\nCVE-2026-0258\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with DNS Proxy enabled and a network proxy attached\n\naffected by\n\nCVE-2026-0264\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with Authentication Profile with CAS enabled and Authentication profile is attached to a login interface\n\naffected by\n\nCVE-2026-0265\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW\n\naffected by\n\nCVE-2026-0269\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h7. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with URL filtering enabled and a customized response page\n\naffected by\n\nCVE-2026-0301\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h7 or later versions. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nMITIGATIONS\n\nSiemens has identified the following specific mitigations that customers can apply to reduce the risk:\n\nCVE-2026-0257\n\nUse a dedicated certificate for Authentication Override cookies\n\nDisable Authentication Override options (for generating and accepting cookies) in the GlobalProtect portal and gateway configuration\n\nCVE-2026-0264\n\nDisassociate DNS Proxy from externally accessible interfaces and configure DNS server with a RFC1918 or a public trusted IP address\n\nDisable the DNS Proxy feature (Network > DNS Proxy) if it is not being used and configure DNS server with a RFC1918 or a public trusted IP address\n\nCVE-2026-0300\n\nRestrict access to the User-ID Authentication Portal to trusted internal IP addresses only\n\nDisable Response Pages in the Interface Management Profile attached to every L3 interface in any zone where untrusted/internet traffic can ingress. Keep Response Pages enabled only on interfaces in trust/internal zones where legitimate users' browsers ingress\n\nDisable User-ID™ Authentication Portal if not required\n\nProduct-specific remediations or mitigations can be found in the section\nKnown Affected Products .\n\nPlease follow the General Security Recommendations .\n\nGENERAL SECURITY RECOMMENDATIONS\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security ), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\nPRODUCT DESCRIPTION\n\nRUGGEDCOM APE1808 is a powerful utility-grade application hosting platform that lets you deploy a range of commercially available applications for edge computing and cybersecurity in harsh, industrial environments.\n\nVULNERABILITY DESCRIPTION\n\nUn-/Collapse All\n\nThis chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory.\nWherever applicable, it also documents the product-specific impact of the individual vulnerabilities.\n\nVulnerability CVE-2026-0256\n\nA stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface.\n\nCVSS v3.1 Base Score\n5.2\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N\n\nCVSS v4.0 Base Score\n6.9\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N\n\nCWE\nCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\nVulnerability CVE-2026-0257\n\nAuthentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\n\nCVSS v3.1 Base Score\n9.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N\n\nCVSS v4.0 Base Score\n7.8\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N\n\nCWE\nCWE-565: Reliance on Cookies without Validation and Integrity Checking\n\nVulnerability CVE-2026-0258\n\nA server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition\n\nCVSS v3.1 Base Score\n8.2\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H\n\nCVSS v4.0 Base Score\n8.3\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-918: Server-Side Request Forgery (SSRF)\n\nVulnerability CVE-2026-0261\n\nMultiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI\n\nCVSS v3.1 Base Score\n7.2\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n8.6\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nVulnerability CVE-2026-0262\n\nMultiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to a dataplane interface\n\nCVSS v3.1 Base Score\n7.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\nCVSS v4.0 Base Score\n8.7\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-754: Improper Check for Unusual or Exceptional Conditions\n\nVulnerability CVE-2026-0264\n\nA buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only)\n\nCVSS v3.1 Base Score\n9.0\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n9.2\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N\n\nCWE\nCWE-122: Heap-based Buffer Overflow\n\nVulnerability CVE-2026-0265\n\nAn authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled\n\nCVSS v3.1 Base Score\n9.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n9.2\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-347: Improper Verification of Cryptographic Signature\n\nVulnerability CVE-2026-0269\n\nA memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.\n\nCVSS v3.1 Base Score\n0.0\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N\n\nCVSS v4.0 Base Score\n6.9\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-754: Improper Check for Unusual or Exceptional Conditions\n\nVulnerability CVE-2026-0300\n\nA buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.\n\nCVSS v3.1 Base Score\n10.0\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n9.3\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N\n\nCWE\nCWE-787: Out-of-bounds Write\n\nVulnerability CVE-2026-0301\n\nAn information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information.\n\nCVSS v3.1 Base Score\n5.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n\nCVSS v4.0 Base Score\n6.3\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N\n\nCWE\nCWE-908: Use of Uninitialized Resource\n\nADDITIONAL INFORMATION\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT:\n\nhttps://www.siemens.com/cert/advisories\n\nHISTORY DATA\n\nV1.0 (2026-05-12):\n\nPublication Date\n\nV1.1 (2026-06-09):\n\nAdded CVE-2026-0256, CVE-2026-0257, CVE-2026-0258, CVE-2026-0261, CVE-2026-0262, CVE-2026-0264 and CVE-2026-0265\n\nV1.2 (2026-07-14):\n\nAdded CVE-2026-0269. Added remediation for CVE-2026-0300, CVE-2026-0256, CVE-2026-0257, CVE-2026-0261, CVE-2026-0262, CVE-2026-0258, CVE-2026-0264 and CVE-2026-0265\n\nV1.3 (2026-10-13):\n\nAdded CVE-2026-0301\n\nTERMS OF USE\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on:\nhttps://www.siemens.com/productcert/terms-of-use .\n\nSSA-967325\n\n©\nSiemens 2026", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2026-0257", "relatedCves": [ "CVE-2026-0300", "CVE-2026-0256", "CVE-2026-0261", "CVE-2026-0262", "CVE-2026-0257", "CVE-2026-0258", "CVE-2026-0264", "CVE-2026-0265", "CVE-2026-0269", "CVE-2026-0301" ] } ], "limits": { "completeness": "bounded", "truncatedFields": [ "/containers/cna/affected/1/cpes" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。", "excludedLinkedSources": [] }, "supplementarySources": [ { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "title": "SSA-967325", "relatedCves": [ "CVE-2026-0300", "CVE-2026-0256", "CVE-2026-0261", "CVE-2026-0262", "CVE-2026-0257", "CVE-2026-0258", "CVE-2026-0264", "CVE-2026-0265", "CVE-2026-0269", "CVE-2026-0301" ] } ], "relatedDocuments": [ { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "title": "SSA-967325", "relatedCves": [ "CVE-2026-0300", "CVE-2026-0256", "CVE-2026-0261", "CVE-2026-0262", "CVE-2026-0257", "CVE-2026-0258", "CVE-2026-0264", "CVE-2026-0265", "CVE-2026-0269", "CVE-2026-0301" ], "truncated": false } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T01:11:26.182Z", "fetchedAt": "2026-10-23T02:43:40.548Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-29T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Cloud NGFW / PAN-OS / Prisma Accessに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:32.624Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7e80c1810ad33b2df84ed7b956d9d3e3d585438a2919bde7da9ae418ca3c3ce5", "sourceModifiedAt": "2026-10-15T01:11:26.182Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Palo Alto Networks PAN-OS の GlobalProtect ポータルとゲートウェイに認証バイパスの脆弱性があり、攻撃者はセキュリティ制限を回避して不正な VPN 接続を確立できる。Panorama と Cloud NGFW は影響を受けない。", "risk": "攻撃者が認証を回避し、許可されていない VPN 接続を確立できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "PAN-OS の GlobalProtect ポータルおよびゲートウェイが対象。Panorama と Cloud NGFW は影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Palo Alto Networks / PAN-OS。影響ありとして記載：12.1.0以上、12.1.7, 12.1.4-h6未満。途中の変更：12.1.7から影響なし、12.1.4-h6から影響なし。影響ありとして記載：11.2.0以上、11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17未満。途中の変更：11.2.12から影響なし、11.2.10-h7から影響なし、11.2.7-h14から影響なし、11.2.4-h17から影響なし。影響ありとして記載：11.1.0以上、11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33未満。途中の変更：11.1.15から影響なし、11.1.13-h5から影響なし、11.1.10-h25から影響なし、11.1.7-h6から影響なし、11.1.6-h32から影響なし、11.1.4-h33から影響なし。影響ありとして記載：10.2.0以上、10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34未満。途中の変更：10.2.18-h6から影響なし、10.2.16-h7から影響なし、10.2.13-h21から影響なし、10.2.10-h36から影響なし、10.2.7-h34から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Palo Alto Networks / Prisma Access。影響ありとして記載：10.2.0以上、10.2.10-h36未満。途中の変更：10.2.10-h36から影響なし。影響ありとして記載：11.2.0以上、11.2.7-h13未満。途中の変更：11.2.7-h13から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0257" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cloud NGFW / PAN-OS / Prisma Access」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-0257", "https://security.paloaltonetworks.com/CVE-2026-0257", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0257", "https://nvd.nist.gov/vuln/detail/CVE-2026-0257" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "認証オーバーライド用クッキーに専用の証明書を使用し、ポータルやゲートウェイの証明書を再利用せず、他の機能やユーザーと共有しない。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E6" ] }, { "text": "GlobalProtect ポータルおよびゲートウェイ設定で認証オーバーライドを無効化し、クッキーの生成・受け入れオプションのチェックを外す。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-0257", "https://security.paloaltonetworks.com/CVE-2026-0257", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0257", "https://nvd.nist.gov/vuln/detail/CVE-2026-0257" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0257", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-0257", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2026-0257", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0257", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\n\nPanorama and Cloud NGFW are not impacted by these issues.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourceField": "/containers/cna/title", "excerpt": "PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Cloud NGFW\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"PAN-OS\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.1.0\",\"lessThan\":\"12.1.7, 12.1.4-h6\",\"changes\":[{\"at\":\"12.1.7\",\"status\":\"unaffected\"},{\"at\":\"12.1.4-h6\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17\",\"changes\":[{\"at\":\"11.2.12\",\"status\":\"unaffected\"},{\"at\":\"11.2.10-h7\",\"status\":\"unaffected\"},{\"at\":\"11.2.7-h14\",\"status\":\"unaffected\"},{\"at\":\"11.2.4-h17\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.1.0\",\"lessThan\":\"11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33\",\"changes\":[{\"at\":\"11.1.15\",\"status\":\"unaffected\"},{\"at\":\"11.1.13-h5\",\"status\":\"unaffected\"},{\"at\":\"11.1.10-h25\",\"status\":\"unaffected\"},{\"at\":\"11.1.7-h6\",\"status\":\"unaffected\"},{\"at\":\"11.1.6-h32\",\"status\":\"unaffected\"},{\"at\":\"11.1.4-h33\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34\",\"changes\":[{\"at\":\"10.2.18-h6\",\"status\":\"unaffected\"},{\"at\":\"10.2.16-h7\",\"status\":\"unaffected\"},{\"at\":\"10.2.13-h21\",\"status\":\"unaffected\"},{\"at\":\"10.2.10-h36\",\"status\":\"unaffected\"},{\"at\":\"10.2.7-h34\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*\"]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Prisma Access\",\"versions\":[{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.10-h36\",\"changes\":[{\"at\":\"10.2.10-h36\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.7-h13\",\"changes\":[{\"at\":\"11.2.7-h13\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0257.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Customers can mitigate the risk of this issue by taking any of the following actions:\n\n\n\n\n\n * Use a dedicated certificate for Authentication Override cookies: Generate a new certificate exclusively for authentication override cookies and store it securely. Do not reuse the portal or gateway certificate, and do not share this certificate with other features or users.\n * Disable Authentication Override: Uncheck the Authentication Override options (for generating and accepting cookies) in the GlobalProtect portal and gateway configuration.", "language": "eng", "representation": "source_excerpt" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0257", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-0257\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-0257（Cloud NGFW / PAN-OS / Prisma Access）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・PAN-OS の GlobalProtect ポータルおよびゲートウェイが対象。Panorama と Cloud NGFW は影響なし。\n・公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。\n・公式の対象表：Palo Alto Networks / PAN-OS。影響ありとして記載：12.1.0以上、12.1.7, 12.1.4-h6未満。途中の変更：12.1.7から影響なし、12.1.4-h6から影響なし。影響ありとして記載：11.2.0以上、11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17未満。途中の変更：11.2.12から影響なし、11.2.10-h7から影響なし、11.2.7-h14から影響なし、11.2.4-h17から影響なし。影響ありとして記載：11.1.0以上、11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33未満。途中の変更：11.1.15から影響なし、11.1.13-h5から影響なし、11.1.10-h25から影響なし、11.1.7-h6から影響なし、11.1.6-h32から影響なし、11.1.4-h33から影響なし。影響ありとして記載：10.2.0以上、10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34未満。途中の変更：10.2.18-h6から影響なし、10.2.16-h7から影響なし、10.2.13-h21から影響なし、10.2.10-h36から影響なし、10.2.7-h34から影響なし。\n・公式の対象表：Palo Alto Networks / Prisma Access。影響ありとして記載：10.2.0以上、10.2.10-h36未満。途中の変更：10.2.10-h36から影響なし。影響ありとして記載：11.2.0以上、11.2.7-h13未満。途中の変更：11.2.7-h13から影響なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-0257", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:32.624Z", "lastSuccess": "2026-10-23T03:23:32.624Z", "sourceCheckedAt": "2026-10-23T02:43:40.548Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-45321", "aliases": [], "title": "arktype-adapter / eslint-plugin-router / eslint-plugin-start / history / nitro-v2-vite-plugin / react-router / react-router-devtools / react-router-ssr-query / react-start / react-start-client / react-start-rsc / react-start-server / router-cli / rou：脆弱性情報", "summary": "2026年5月11日19時20分から19時26分（UTC）の間に、42の @tanstack/* パッケージにわたって84の悪意あるバージョンが npm レジストリに公開されました。公開は TanStack/router 用の正当な GitHub Actions OIDC trusted‑publisher バインディングを利用して認証されましたが、公開ワークフロー自体は変更されていませんでした。攻撃者は、pull_request_target の設定ミス、フォーク↔ベース間の GitHub Actions キャッシュ汚染、そして Actions ランナーのプロセスから OIDC トークンをメモリ上で抽出するという 3 つの既知の脆弱性クラスを組み合わせ、信頼された ID で認証情報を盗むマルウェアを公開しました。影響を受けた各パッケージは、数分間隔で 2 つずつの悪意あるバージョンを受け取りました。", "risk": "このマルウェアはクラウド認証情報、GitHub トークン、SSH 鍵を外部に送信し、攻撃者に不正に取得させる可能性があります。また、CISA の既知の悪用リストに掲載されており、実際に悪用が確認されています。", "product": "arktype-adapter / eslint-plugin-router / eslint-plugin-start / history / nitro-v2-vite-plugin / react-router / react-router-devtools / react-router-ssr-query / react-start / react-start-client / react-start-rsc / react-start-server / router-cli / rou", "category": "other", "component": "package", "severity": "critical", "cvss": 9.6, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "affected": [ { "product": "arktype-adapter", "range": "1.166.12" }, { "product": "arktype-adapter", "range": "1.166.15" }, { "product": "eslint-plugin-router", "range": "1.161.9" }, { "product": "eslint-plugin-router", "range": "1.161.12" }, { "product": "eslint-plugin-start", "range": "0.0.4" }, { "product": "eslint-plugin-start", "range": "0.0.7" }, { "product": "history", "range": "1.161.9" }, { "product": "history", "range": "1.161.12" }, { "product": "nitro-v2-vite-plugin", "range": "1.154.12" }, { "product": "nitro-v2-vite-plugin", "range": "1.154.15" }, { "product": "react-router", "range": "1.169.5" }, { "product": "react-router", "range": "1.169.8" }, { "product": "react-router-devtools", "range": "1.166.16" }, { "product": "react-router-devtools", "range": "1.166.19" }, { "product": "react-router-ssr-query", "range": "1.166.15" }, { "product": "react-router-ssr-query", "range": "1.166.18" }, { "product": "react-start", "range": "1.167.68" }, { "product": "react-start", "range": "1.167.71" }, { "product": "react-start-client", "range": "1.166.51" }, { "product": "react-start-client", "range": "1.166.54" }, { "product": "react-start-rsc", "range": "0.0.47" }, { "product": "react-start-rsc", "range": "0.0.50" }, { "product": "react-start-server", "range": "1.166.55" }, { "product": "react-start-server", "range": "1.166.58" }, { "product": "router-cli", "range": "1.166.46" }, { "product": "router-cli", "range": "1.166.49" }, { "product": "router-core", "range": "1.169.5" }, { "product": "router-core", "range": "1.169.8" }, { "product": "router-devtools", "range": "1.166.16" }, { "product": "router-devtools", "range": "1.166.19" }, { "product": "router-devtools-core", "range": "1.167.6" }, { "product": "router-devtools-core", "range": "1.167.9" }, { "product": "router-generator", "range": "1.166.45" }, { "product": "router-generator", "range": "1.166.48" }, { "product": "router-plugin", "range": "1.167.38" }, { "product": "router-plugin", "range": "1.167.41" }, { "product": "router-ssr-query-core", "range": "1.168.3" }, { "product": "router-ssr-query-core", "range": "1.168.6" }, { "product": "router-utils", "range": "1.161.11" }, { "product": "router-utils", "range": "1.161.14" }, { "product": "outer-vite-plugin", "range": "1.166.53" }, { "product": "outer-vite-plugin", "range": "1.166.56" }, { "product": "solid-router", "range": "1.169.5" }, { "product": "solid-router", "range": "1.169.8" }, { "product": "solid-router-devtools", "range": "1.166.16" }, { "product": "solid-router-devtools", "range": "1.166.19" }, { "product": "solid-router-ssr-query", "range": "1.166.15" }, { "product": "solid-router-ssr-query", "range": "1.166.18" }, { "product": "solid-start", "range": "1.167.65" }, { "product": "solid-start", "range": "1.167.68" }, { "product": "solid-start-client", "range": "1.166.50" }, { "product": "solid-start-client", "range": "1.166.53" }, { "product": "solid-start-server", "range": "1.166.54" }, { "product": "solid-start-server", "range": "1.166.57" }, { "product": "start-client-core", "range": "1.168.5" }, { "product": "start-client-core", "range": "1.168.8" }, { "product": "start-fn-stubs", "range": "1.161.9" }, { "product": "start-fn-stubs", "range": "1.161.12" }, { "product": "start-plugin-core", "range": "1.169.23" }, { "product": "start-plugin-core", "range": "1.169.26" }, { "product": "start-server-core", "range": "1.167.33" }, { "product": "start-server-core", "range": "1.167.36" }, { "product": "start-static-server-functions", "range": "1.166.44" }, { "product": "start-static-server-functions", "range": "1.166.47" }, { "product": "start-storage-context", "range": "1.166.38" }, { "product": "start-storage-context", "range": "1.166.41" }, { "product": "valibot-adapter", "range": "1.166.12" }, { "product": "valibot-adapter", "range": "1.166.15" }, { "product": "virtual-file-routes", "range": "1.161.10" }, { "product": "virtual-file-routes", "range": "1.161.13" }, { "product": "vue-router", "range": "1.169.5" }, { "product": "vue-router", "range": "1.169.8" }, { "product": "vue-router-devtools", "range": "1.166.16" }, { "product": "vue-router-devtools", "range": "1.166.19" }, { "product": "vue-router-ssr-query", "range": "1.166.15" }, { "product": "vue-router-ssr-query", "range": "1.166.18" }, { "product": "vue-start", "range": "1.167.61" }, { "product": "vue-start", "range": "1.167.64" }, { "product": "vue-start-client", "range": "1.166.46" }, { "product": "vue-start-client", "range": "1.166.49" }, { "product": "vue-start-server", "range": "1.166.50" }, { "product": "vue-start-server", "range": "1.166.53" }, { "product": "zod-adapter", "range": "1.166.12" }, { "product": "zod-adapter", "range": "1.166.15" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-45321", "label": "CVE公式レコード" }, { "url": "https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx", "label": "CISAが示す関連情報" }, { "url": "https://github.com/TanStack/router/issues/7383", "label": "https://github.com/TanStack/router/issues/7383" }, { "url": "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem", "label": "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem" }, { "url": "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem", "label": "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45321", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-12T00:12:35.452Z", "modifiedAt": "2026-08-04T03:56:09.005Z", "fetchedAt": "2026-10-23T02:43:49.008Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target \"Pwn Request\" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.", "sourceTitle": "Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "@tanstack", "product": "arktype-adapter", "versions": [ { "version": "1.166.12", "status": "affected" }, { "version": "1.166.15", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "eslint-plugin-router", "versions": [ { "version": "1.161.9", "status": "affected" }, { "version": "1.161.12", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "eslint-plugin-start", "versions": [ { "version": "0.0.4", "status": "affected" }, { "version": "0.0.7", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "history", "versions": [ { "version": "1.161.9", "status": "affected" }, { "version": "1.161.12", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "nitro-v2-vite-plugin", "versions": [ { "version": "1.154.12", "status": "affected" }, { "version": "1.154.15", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-router", "versions": [ { "version": "1.169.5", "status": "affected" }, { "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-router-devtools", "versions": [ { "version": "1.166.16", "status": "affected" }, { "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-router-ssr-query", "versions": [ { "version": "1.166.15", "status": "affected" }, { "version": "1.166.18", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start", "versions": [ { "version": "1.167.68", "status": "affected" }, { "version": "1.167.71", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start-client", "versions": [ { "version": "1.166.51", "status": "affected" }, { "version": "1.166.54", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start-rsc", "versions": [ { "version": "0.0.47", "status": "affected" }, { "version": "0.0.50", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start-server", "versions": [ { "version": "1.166.55", "status": "affected" }, { "version": "1.166.58", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-cli", "versions": [ { "version": "1.166.46", "status": "affected" }, { "version": "1.166.49", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-core", "versions": [ { "version": "1.169.5", "status": "affected" }, { "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-devtools", "versions": [ { "version": "1.166.16", "status": "affected" }, { "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-devtools-core", "versions": [ { "version": "1.167.6", "status": "affected" }, { "version": "1.167.9", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-generator", "versions": [ { "version": "1.166.45", "status": "affected" }, { "version": "1.166.48", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-plugin", "versions": [ { "version": "1.167.38", "status": "affected" }, { "version": "1.167.41", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-ssr-query-core", "versions": [ { "version": "1.168.3", "status": "affected" }, { "version": "1.168.6", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-utils", "versions": [ { "version": "1.161.11", "status": "affected" }, { "version": "1.161.14", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "outer-vite-plugin", "versions": [ { "version": "1.166.53", "status": "affected" }, { "version": "1.166.56", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-router", "versions": [ { "version": "1.169.5", "status": "affected" }, { "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-router-devtools", "versions": [ { "version": "1.166.16", "status": "affected" }, { "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-router-ssr-query", "versions": [ { "version": "1.166.15", "status": "affected" }, { "version": "1.166.18", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-start", "versions": [ { "version": "1.167.65", "status": "affected" }, { "version": "1.167.68", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-start-client", "versions": [ { "version": "1.166.50", "status": "affected" }, { "version": "1.166.53", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-start-server", "versions": [ { "version": "1.166.54", "status": "affected" }, { "version": "1.166.57", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-client-core", "versions": [ { "version": "1.168.5", "status": "affected" }, { "version": "1.168.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-fn-stubs", "versions": [ { "version": "1.161.9", "status": "affected" }, { "version": "1.161.12", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-plugin-core", "versions": [ { "version": "1.169.23", "status": "affected" }, { "version": "1.169.26", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-server-core", "versions": [ { "version": "1.167.33", "status": "affected" }, { "version": "1.167.36", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-static-server-functions", "versions": [ { "version": "1.166.44", "status": "affected" }, { "version": "1.166.47", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-storage-context", "versions": [ { "version": "1.166.38", "status": "affected" }, { "version": "1.166.41", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "valibot-adapter", "versions": [ { "version": "1.166.12", "status": "affected" }, { "version": "1.166.15", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "virtual-file-routes", "versions": [ { "version": "1.161.10", "status": "affected" }, { "version": "1.161.13", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-router", "versions": [ { "version": "1.169.5", "status": "affected" }, { "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-router-devtools", "versions": [ { "version": "1.166.16", "status": "affected" }, { "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-router-ssr-query", "versions": [ { "version": "1.166.15", "status": "affected" }, { "version": "1.166.18", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-start", "versions": [ { "version": "1.167.61", "status": "affected" }, { "version": "1.167.64", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-start-client", "versions": [ { "version": "1.166.46", "status": "affected" }, { "version": "1.166.49", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-start-server", "versions": [ { "version": "1.166.50", "status": "affected" }, { "version": "1.166.53", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "zod-adapter", "versions": [ { "version": "1.166.12", "status": "affected" }, { "version": "1.166.15", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-45321", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "fetchedAt": "2026-10-23T02:43:49.008Z", "publishedAt": "2026-05-12T00:12:35.452Z", "modifiedAt": "2026-08-04T03:56:09.005Z", "state": "published", "provider": "GitHub_M", "title": "Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys", "descriptions": [ { "lang": "en", "value": "On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target \"Pwn Request\" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "@tanstack", "product": "arktype-adapter", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "1.166.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "1.166.15", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "eslint-plugin-router", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "1.161.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "1.161.12", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "eslint-plugin-start", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "0.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "0.0.7", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "history", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "1.161.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/3/versions/1", "version": "1.161.12", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "nitro-v2-vite-plugin", "sourcePath": "/containers/cna/affected/4", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "1.154.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/4/versions/1", "version": "1.154.15", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-router", "sourcePath": "/containers/cna/affected/5", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "1.169.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/5/versions/1", "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-router-devtools", "sourcePath": "/containers/cna/affected/6", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "1.166.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/6/versions/1", "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-router-ssr-query", "sourcePath": "/containers/cna/affected/7", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "1.166.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/7/versions/1", "version": "1.166.18", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start", "sourcePath": "/containers/cna/affected/8", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "1.167.68", "status": "affected" }, { "sourcePath": "/containers/cna/affected/8/versions/1", "version": "1.167.71", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start-client", "sourcePath": "/containers/cna/affected/9", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "1.166.51", "status": "affected" }, { "sourcePath": "/containers/cna/affected/9/versions/1", "version": "1.166.54", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start-rsc", "sourcePath": "/containers/cna/affected/10", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "0.0.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/10/versions/1", "version": "0.0.50", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "react-start-server", "sourcePath": "/containers/cna/affected/11", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "1.166.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/11/versions/1", "version": "1.166.58", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-cli", "sourcePath": "/containers/cna/affected/12", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "1.166.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/12/versions/1", "version": "1.166.49", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-core", "sourcePath": "/containers/cna/affected/13", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "1.169.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/13/versions/1", "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-devtools", "sourcePath": "/containers/cna/affected/14", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "1.166.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/14/versions/1", "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-devtools-core", "sourcePath": "/containers/cna/affected/15", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "1.167.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/15/versions/1", "version": "1.167.9", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-generator", "sourcePath": "/containers/cna/affected/16", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "1.166.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/16/versions/1", "version": "1.166.48", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-plugin", "sourcePath": "/containers/cna/affected/17", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "1.167.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/17/versions/1", "version": "1.167.41", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-ssr-query-core", "sourcePath": "/containers/cna/affected/18", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "1.168.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/18/versions/1", "version": "1.168.6", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "router-utils", "sourcePath": "/containers/cna/affected/19", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "1.161.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/19/versions/1", "version": "1.161.14", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "outer-vite-plugin", "sourcePath": "/containers/cna/affected/20", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/20/versions/0", "version": "1.166.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/20/versions/1", "version": "1.166.56", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-router", "sourcePath": "/containers/cna/affected/21", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/21/versions/0", "version": "1.169.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/21/versions/1", "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-router-devtools", "sourcePath": "/containers/cna/affected/22", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/22/versions/0", "version": "1.166.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/22/versions/1", "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-router-ssr-query", "sourcePath": "/containers/cna/affected/23", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/23/versions/0", "version": "1.166.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/23/versions/1", "version": "1.166.18", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-start", "sourcePath": "/containers/cna/affected/24", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/24/versions/0", "version": "1.167.65", "status": "affected" }, { "sourcePath": "/containers/cna/affected/24/versions/1", "version": "1.167.68", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-start-client", "sourcePath": "/containers/cna/affected/25", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/25/versions/0", "version": "1.166.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/25/versions/1", "version": "1.166.53", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "solid-start-server", "sourcePath": "/containers/cna/affected/26", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/26/versions/0", "version": "1.166.54", "status": "affected" }, { "sourcePath": "/containers/cna/affected/26/versions/1", "version": "1.166.57", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-client-core", "sourcePath": "/containers/cna/affected/27", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/27/versions/0", "version": "1.168.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/27/versions/1", "version": "1.168.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-fn-stubs", "sourcePath": "/containers/cna/affected/28", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/28/versions/0", "version": "1.161.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/28/versions/1", "version": "1.161.12", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-plugin-core", "sourcePath": "/containers/cna/affected/29", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/29/versions/0", "version": "1.169.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/29/versions/1", "version": "1.169.26", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-server-core", "sourcePath": "/containers/cna/affected/30", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/30/versions/0", "version": "1.167.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/30/versions/1", "version": "1.167.36", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-static-server-functions", "sourcePath": "/containers/cna/affected/31", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/31/versions/0", "version": "1.166.44", "status": "affected" }, { "sourcePath": "/containers/cna/affected/31/versions/1", "version": "1.166.47", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "start-storage-context", "sourcePath": "/containers/cna/affected/32", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/32/versions/0", "version": "1.166.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/32/versions/1", "version": "1.166.41", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "valibot-adapter", "sourcePath": "/containers/cna/affected/33", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/33/versions/0", "version": "1.166.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/33/versions/1", "version": "1.166.15", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "virtual-file-routes", "sourcePath": "/containers/cna/affected/34", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/34/versions/0", "version": "1.161.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/34/versions/1", "version": "1.161.13", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-router", "sourcePath": "/containers/cna/affected/35", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/35/versions/0", "version": "1.169.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/35/versions/1", "version": "1.169.8", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-router-devtools", "sourcePath": "/containers/cna/affected/36", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/36/versions/0", "version": "1.166.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/36/versions/1", "version": "1.166.19", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-router-ssr-query", "sourcePath": "/containers/cna/affected/37", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/37/versions/0", "version": "1.166.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/37/versions/1", "version": "1.166.18", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-start", "sourcePath": "/containers/cna/affected/38", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/38/versions/0", "version": "1.167.61", "status": "affected" }, { "sourcePath": "/containers/cna/affected/38/versions/1", "version": "1.167.64", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-start-client", "sourcePath": "/containers/cna/affected/39", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/39/versions/0", "version": "1.166.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/39/versions/1", "version": "1.166.49", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "vue-start-server", "sourcePath": "/containers/cna/affected/40", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/40/versions/0", "version": "1.166.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/40/versions/1", "version": "1.166.53", "status": "affected" } ] }, { "vendor": "@tanstack", "product": "zod-adapter", "sourcePath": "/containers/cna/affected/41", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/41/versions/0", "version": "1.166.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/41/versions/1", "version": "1.166.15", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-506", "lang": "en", "description": "CWE-506: Embedded Malicious Code", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "baseScore": 9.6, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx", "label": "https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/TanStack/router/issues/7383", "label": "https://github.com/TanStack/router/issues/7383", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem", "label": "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem", "label": "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45321", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"@tanstack\",\"product\":\"arktype-adapter\",\"versions\":[{\"version\":\"1.166.12\",\"status\":\"affected\"},{\"version\":\"1.166.15\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"@tanstack\",\"product\":\"eslint-plugin-router\",\"versions\":[{\"version\":\"1.161.9\",\"status\":\"affected\"},{\"version\":\"1.161.12\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"@tanstack\",\"product\":\"eslint-plugin-start\",\"versions\":[{\"version\":\"0.0.4\",\"status\":\"affected\"},{\"version\":\"0.0.7\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"@tanstack\",\"product\":\"history\",\"versions\":[{\"version\":\"1.161.9\",\"status\":\"affected\"},{\"version\":\"1.161.12\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"@tanstack\",\"product\":\"nitro-v2-vite-plugin\",\"versions\":[{\"version\":\"1.154.12\",\"status\":\"affected\"},{\"version\":\"1.154.15\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"@tanstack\",\"product\":\"react-router\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"@tanstack\",\"product\":\"react-router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"@tanstack\",\"product\":\"react-router-ssr-query\",\"versions\":[{\"version\":\"1.166.15\",\"status\":\"affected\"},{\"version\":\"1.166.18\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"@tanstack\",\"product\":\"react-start\",\"versions\":[{\"version\":\"1.167.68\",\"status\":\"affected\"},{\"version\":\"1.167.71\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"@tanstack\",\"product\":\"react-start-client\",\"versions\":[{\"version\":\"1.166.51\",\"status\":\"affected\"},{\"version\":\"1.166.54\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"@tanstack\",\"product\":\"react-start-rsc\",\"versions\":[{\"version\":\"0.0.47\",\"status\":\"affected\"},{\"version\":\"0.0.50\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"@tanstack\",\"product\":\"react-start-server\",\"versions\":[{\"version\":\"1.166.55\",\"status\":\"affected\"},{\"version\":\"1.166.58\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-cli\",\"versions\":[{\"version\":\"1.166.46\",\"status\":\"affected\"},{\"version\":\"1.166.49\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-core\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-devtools-core\",\"versions\":[{\"version\":\"1.167.6\",\"status\":\"affected\"},{\"version\":\"1.167.9\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-generator\",\"versions\":[{\"version\":\"1.166.45\",\"status\":\"affected\"},{\"version\":\"1.166.48\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-plugin\",\"versions\":[{\"version\":\"1.167.38\",\"status\":\"affected\"},{\"version\":\"1.167.41\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-ssr-query-core\",\"versions\":[{\"version\":\"1.168.3\",\"status\":\"affected\"},{\"version\":\"1.168.6\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"@tanstack\",\"product\":\"router-utils\",\"versions\":[{\"version\":\"1.161.11\",\"status\":\"affected\"},{\"version\":\"1.161.14\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/20", "text": "{\"vendor\":\"@tanstack\",\"product\":\"outer-vite-plugin\",\"versions\":[{\"version\":\"1.166.53\",\"status\":\"affected\"},{\"version\":\"1.166.56\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/21", "text": "{\"vendor\":\"@tanstack\",\"product\":\"solid-router\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/22", "text": "{\"vendor\":\"@tanstack\",\"product\":\"solid-router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/23", "text": "{\"vendor\":\"@tanstack\",\"product\":\"solid-router-ssr-query\",\"versions\":[{\"version\":\"1.166.15\",\"status\":\"affected\"},{\"version\":\"1.166.18\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/24", "text": "{\"vendor\":\"@tanstack\",\"product\":\"solid-start\",\"versions\":[{\"version\":\"1.167.65\",\"status\":\"affected\"},{\"version\":\"1.167.68\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/25", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/25", "text": "{\"vendor\":\"@tanstack\",\"product\":\"solid-start-client\",\"versions\":[{\"version\":\"1.166.50\",\"status\":\"affected\"},{\"version\":\"1.166.53\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/26", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/26", "text": "{\"vendor\":\"@tanstack\",\"product\":\"solid-start-server\",\"versions\":[{\"version\":\"1.166.54\",\"status\":\"affected\"},{\"version\":\"1.166.57\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/27", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/27", "text": "{\"vendor\":\"@tanstack\",\"product\":\"start-client-core\",\"versions\":[{\"version\":\"1.168.5\",\"status\":\"affected\"},{\"version\":\"1.168.8\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/28", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/28", "text": "{\"vendor\":\"@tanstack\",\"product\":\"start-fn-stubs\",\"versions\":[{\"version\":\"1.161.9\",\"status\":\"affected\"},{\"version\":\"1.161.12\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/29", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/29", "text": "{\"vendor\":\"@tanstack\",\"product\":\"start-plugin-core\",\"versions\":[{\"version\":\"1.169.23\",\"status\":\"affected\"},{\"version\":\"1.169.26\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/30", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/30", "text": "{\"vendor\":\"@tanstack\",\"product\":\"start-server-core\",\"versions\":[{\"version\":\"1.167.33\",\"status\":\"affected\"},{\"version\":\"1.167.36\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/31", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/31", "text": "{\"vendor\":\"@tanstack\",\"product\":\"start-static-server-functions\",\"versions\":[{\"version\":\"1.166.44\",\"status\":\"affected\"},{\"version\":\"1.166.47\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/32", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/32", "text": "{\"vendor\":\"@tanstack\",\"product\":\"start-storage-context\",\"versions\":[{\"version\":\"1.166.38\",\"status\":\"affected\"},{\"version\":\"1.166.41\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/33", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/33", "text": "{\"vendor\":\"@tanstack\",\"product\":\"valibot-adapter\",\"versions\":[{\"version\":\"1.166.12\",\"status\":\"affected\"},{\"version\":\"1.166.15\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/34", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/34", "text": "{\"vendor\":\"@tanstack\",\"product\":\"virtual-file-routes\",\"versions\":[{\"version\":\"1.161.10\",\"status\":\"affected\"},{\"version\":\"1.161.13\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/35", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/35", "text": "{\"vendor\":\"@tanstack\",\"product\":\"vue-router\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/36", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/36", "text": "{\"vendor\":\"@tanstack\",\"product\":\"vue-router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/37", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/37", "text": "{\"vendor\":\"@tanstack\",\"product\":\"vue-router-ssr-query\",\"versions\":[{\"version\":\"1.166.15\",\"status\":\"affected\"},{\"version\":\"1.166.18\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/38", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/38", "text": "{\"vendor\":\"@tanstack\",\"product\":\"vue-start\",\"versions\":[{\"version\":\"1.167.61\",\"status\":\"affected\"},{\"version\":\"1.167.64\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/39", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/39", "text": "{\"vendor\":\"@tanstack\",\"product\":\"vue-start-client\",\"versions\":[{\"version\":\"1.166.46\",\"status\":\"affected\"},{\"version\":\"1.166.49\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/40", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/40", "text": "{\"vendor\":\"@tanstack\",\"product\":\"vue-start-server\",\"versions\":[{\"version\":\"1.166.50\",\"status\":\"affected\"},{\"version\":\"1.166.53\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/41", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/affected/41", "text": "{\"vendor\":\"@tanstack\",\"product\":\"zod-adapter\",\"versions\":[{\"version\":\"1.166.12\",\"status\":\"affected\"},{\"version\":\"1.166.15\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target \"Pwn Request\" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-506\",\"lang\":\"en\",\"description\":\"CWE-506: Embedded Malicious Code\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.6,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:56:09.005Z", "fetchedAt": "2026-10-23T02:43:49.008Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-27T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "arktype-adapter / eslint-plugin-router / eslint-plugin-start / history / nitro-v2-vite-plugin / react-router / react-router-devtools / react-router-ssr-query / react-start / react-start-client / react-start-rsc / react-start-server / router-cli / rouに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:33.501Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "edc9b690f67315a3e015a35f252d119efaf4cac2b17c38519121fede0c2fadff", "sourceModifiedAt": "2026-08-04T03:56:09.005Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "2026年5月11日19時20分から19時26分（UTC）の間に、42の @tanstack/* パッケージにわたって84の悪意あるバージョンが npm レジストリに公開されました。公開は TanStack/router 用の正当な GitHub Actions OIDC trusted‑publisher バインディングを利用して認証されましたが、公開ワークフロー自体は変更されていませんでした。攻撃者は、pull_request_target の設定ミス、フォーク↔ベース間の GitHub Actions キャッシュ汚染、そして Actions ランナーのプロセスから OIDC トークンをメモリ上で抽出するという 3 つの既知の脆弱性クラスを組み合わせ、信頼された ID で認証情報を盗むマルウェアを公開しました。影響を受けた各パッケージは、数分間隔で 2 つずつの悪意あるバージョンを受け取りました。", "risk": "このマルウェアはクラウド認証情報、GitHub トークン、SSH 鍵を外部に送信し、攻撃者に不正に取得させる可能性があります。また、CISA の既知の悪用リストに掲載されており、実際に悪用が確認されています。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2", "E3" ], "applicability": [ { "text": "npm に公開する際に、TanStack/router 用の GitHub Actions OIDC trusted‑publisher バインディングを使用していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "GitHub Actions のワークフローで pull_request_target が誤って設定されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "フォークとベースリポジトリ間で GitHub Actions のキャッシュが汚染可能であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Actions ランナーのプロセスから OIDC トークンをメモリ上で抽出できる環境であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：@tanstack / arktype-adapter。影響ありとして記載：1.166.12。影響ありとして記載：1.166.15。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：@tanstack / eslint-plugin-router。影響ありとして記載：1.161.9。影響ありとして記載：1.161.12。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：@tanstack / eslint-plugin-start。影響ありとして記載：0.0.4。影響ありとして記載：0.0.7。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：@tanstack / history。影響ありとして記載：1.161.9。影響ありとして記載：1.161.12。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：@tanstack / nitro-v2-vite-plugin。影響ありとして記載：1.154.12。影響ありとして記載：1.154.15。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：@tanstack / react-router。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：@tanstack / react-router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：@tanstack / react-router-ssr-query。影響ありとして記載：1.166.15。影響ありとして記載：1.166.18。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：@tanstack / react-start。影響ありとして記載：1.167.68。影響ありとして記載：1.167.71。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：@tanstack / react-start-client。影響ありとして記載：1.166.51。影響ありとして記載：1.166.54。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：@tanstack / react-start-rsc。影響ありとして記載：0.0.47。影響ありとして記載：0.0.50。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：@tanstack / react-start-server。影響ありとして記載：1.166.55。影響ありとして記載：1.166.58。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：@tanstack / router-cli。影響ありとして記載：1.166.46。影響ありとして記載：1.166.49。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：@tanstack / router-core。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：@tanstack / router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：@tanstack / router-devtools-core。影響ありとして記載：1.167.6。影響ありとして記載：1.167.9。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：@tanstack / router-generator。影響ありとして記載：1.166.45。影響ありとして記載：1.166.48。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：@tanstack / router-plugin。影響ありとして記載：1.167.38。影響ありとして記載：1.167.41。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：@tanstack / router-ssr-query-core。影響ありとして記載：1.168.3。影響ありとして記載：1.168.6。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E22" ] }, { "text": "公式の対象表：@tanstack / router-utils。影響ありとして記載：1.161.11。影響ありとして記載：1.161.14。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E23" ] }, { "text": "公式の対象表：@tanstack / outer-vite-plugin。影響ありとして記載：1.166.53。影響ありとして記載：1.166.56。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E24" ] }, { "text": "公式の対象表：@tanstack / solid-router。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E25" ] }, { "text": "公式の対象表：@tanstack / solid-router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E26" ] }, { "text": "公式の対象表：@tanstack / solid-router-ssr-query。影響ありとして記載：1.166.15。影響ありとして記載：1.166.18。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E27" ] }, { "text": "公式の対象表：@tanstack / solid-start。影響ありとして記載：1.167.65。影響ありとして記載：1.167.68。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E28" ] }, { "text": "公式の対象表：@tanstack / solid-start-client。影響ありとして記載：1.166.50。影響ありとして記載：1.166.53。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E29" ] }, { "text": "公式の対象表：@tanstack / solid-start-server。影響ありとして記載：1.166.54。影響ありとして記載：1.166.57。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E30" ] }, { "text": "公式の対象表：@tanstack / start-client-core。影響ありとして記載：1.168.5。影響ありとして記載：1.168.8。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E31" ] }, { "text": "公式の対象表：@tanstack / start-fn-stubs。影響ありとして記載：1.161.9。影響ありとして記載：1.161.12。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E32" ] }, { "text": "公式の対象表：@tanstack / start-plugin-core。影響ありとして記載：1.169.23。影響ありとして記載：1.169.26。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E33" ] }, { "text": "公式の対象表：@tanstack / start-server-core。影響ありとして記載：1.167.33。影響ありとして記載：1.167.36。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E34" ] }, { "text": "公式の対象表：@tanstack / start-static-server-functions。影響ありとして記載：1.166.44。影響ありとして記載：1.166.47。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E35" ] }, { "text": "公式の対象表：@tanstack / start-storage-context。影響ありとして記載：1.166.38。影響ありとして記載：1.166.41。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E36" ] }, { "text": "公式の対象表：@tanstack / valibot-adapter。影響ありとして記載：1.166.12。影響ありとして記載：1.166.15。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E37" ] }, { "text": "公式の対象表：@tanstack / virtual-file-routes。影響ありとして記載：1.161.10。影響ありとして記載：1.161.13。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E38" ] }, { "text": "公式の対象表：@tanstack / vue-router。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E39" ] }, { "text": "公式の対象表：@tanstack / vue-router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E40" ] }, { "text": "公式の対象表：@tanstack / vue-router-ssr-query。影響ありとして記載：1.166.15。影響ありとして記載：1.166.18。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E41" ] }, { "text": "公式の対象表：@tanstack / vue-start。影響ありとして記載：1.167.61。影響ありとして記載：1.167.64。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E42" ] }, { "text": "公式の対象表：@tanstack / vue-start-client。影響ありとして記載：1.166.46。影響ありとして記載：1.166.49。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E43" ] }, { "text": "公式の対象表：@tanstack / vue-start-server。影響ありとして記載：1.166.50。影響ありとして記載：1.166.53。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E44" ] }, { "text": "公式の対象表：@tanstack / zod-adapter。影響ありとして記載：1.166.12。影響ありとして記載：1.166.15。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E45" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E4" ] }, { "text": "「arktype-adapter / eslint-plugin-router / eslint-plugin-start / history / nitro-v2-vite-plugin / react-router / react-router-devtools / react-router-ssr-query / react-start / react-start-client / react-start-rsc / react-start-server / router-cli / rou」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-45321", "https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx", "https://github.com/TanStack/router/issues/7383", "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem", "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321", "https://nvd.nist.gov/vuln/detail/CVE-2026-45321" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-45321", "https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx", "https://github.com/TanStack/router/issues/7383", "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem", "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321", "https://nvd.nist.gov/vuln/detail/CVE-2026-45321" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-45321", "https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx", "https://github.com/TanStack/router/issues/7383", "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem", "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321", "https://nvd.nist.gov/vuln/detail/CVE-2026-45321" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-45321", "label": "CVE公式レコード" }, { "url": "https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx", "label": "CISAが示す関連情報" }, { "url": "https://github.com/TanStack/router/issues/7383", "label": "https://github.com/TanStack/router/issues/7383" }, { "url": "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem", "label": "https://tanstack.com/blog/npm-supply-chain-compromise-postmortem" }, { "url": "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem", "label": "https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45321", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target \"Pwn Request\" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/title", "excerpt": "Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45321", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-45321\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"arktype-adapter\",\"versions\":[{\"version\":\"1.166.12\",\"status\":\"affected\"},{\"version\":\"1.166.15\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"eslint-plugin-router\",\"versions\":[{\"version\":\"1.161.9\",\"status\":\"affected\"},{\"version\":\"1.161.12\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"eslint-plugin-start\",\"versions\":[{\"version\":\"0.0.4\",\"status\":\"affected\"},{\"version\":\"0.0.7\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"history\",\"versions\":[{\"version\":\"1.161.9\",\"status\":\"affected\"},{\"version\":\"1.161.12\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"nitro-v2-vite-plugin\",\"versions\":[{\"version\":\"1.154.12\",\"status\":\"affected\"},{\"version\":\"1.154.15\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"react-router\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"react-router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"react-router-ssr-query\",\"versions\":[{\"version\":\"1.166.15\",\"status\":\"affected\"},{\"version\":\"1.166.18\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"react-start\",\"versions\":[{\"version\":\"1.167.68\",\"status\":\"affected\"},{\"version\":\"1.167.71\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"react-start-client\",\"versions\":[{\"version\":\"1.166.51\",\"status\":\"affected\"},{\"version\":\"1.166.54\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"react-start-rsc\",\"versions\":[{\"version\":\"0.0.47\",\"status\":\"affected\"},{\"version\":\"0.0.50\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"react-start-server\",\"versions\":[{\"version\":\"1.166.55\",\"status\":\"affected\"},{\"version\":\"1.166.58\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-cli\",\"versions\":[{\"version\":\"1.166.46\",\"status\":\"affected\"},{\"version\":\"1.166.49\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-core\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-devtools-core\",\"versions\":[{\"version\":\"1.167.6\",\"status\":\"affected\"},{\"version\":\"1.167.9\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-generator\",\"versions\":[{\"version\":\"1.166.45\",\"status\":\"affected\"},{\"version\":\"1.166.48\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-plugin\",\"versions\":[{\"version\":\"1.167.38\",\"status\":\"affected\"},{\"version\":\"1.167.41\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-ssr-query-core\",\"versions\":[{\"version\":\"1.168.3\",\"status\":\"affected\"},{\"version\":\"1.168.6\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"router-utils\",\"versions\":[{\"version\":\"1.161.11\",\"status\":\"affected\"},{\"version\":\"1.161.14\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/20", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"outer-vite-plugin\",\"versions\":[{\"version\":\"1.166.53\",\"status\":\"affected\"},{\"version\":\"1.166.56\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E25", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/21", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"solid-router\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E26", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/22", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"solid-router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E27", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/23", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"solid-router-ssr-query\",\"versions\":[{\"version\":\"1.166.15\",\"status\":\"affected\"},{\"version\":\"1.166.18\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E28", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/24", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"solid-start\",\"versions\":[{\"version\":\"1.167.65\",\"status\":\"affected\"},{\"version\":\"1.167.68\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E29", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/25", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"solid-start-client\",\"versions\":[{\"version\":\"1.166.50\",\"status\":\"affected\"},{\"version\":\"1.166.53\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E30", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/26", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"solid-start-server\",\"versions\":[{\"version\":\"1.166.54\",\"status\":\"affected\"},{\"version\":\"1.166.57\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E31", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/27", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"start-client-core\",\"versions\":[{\"version\":\"1.168.5\",\"status\":\"affected\"},{\"version\":\"1.168.8\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E32", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/28", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"start-fn-stubs\",\"versions\":[{\"version\":\"1.161.9\",\"status\":\"affected\"},{\"version\":\"1.161.12\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E33", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/29", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"start-plugin-core\",\"versions\":[{\"version\":\"1.169.23\",\"status\":\"affected\"},{\"version\":\"1.169.26\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E34", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/30", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"start-server-core\",\"versions\":[{\"version\":\"1.167.33\",\"status\":\"affected\"},{\"version\":\"1.167.36\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E35", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/31", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"start-static-server-functions\",\"versions\":[{\"version\":\"1.166.44\",\"status\":\"affected\"},{\"version\":\"1.166.47\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E36", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/32", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"start-storage-context\",\"versions\":[{\"version\":\"1.166.38\",\"status\":\"affected\"},{\"version\":\"1.166.41\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E37", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/33", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"valibot-adapter\",\"versions\":[{\"version\":\"1.166.12\",\"status\":\"affected\"},{\"version\":\"1.166.15\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E38", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/34", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"virtual-file-routes\",\"versions\":[{\"version\":\"1.161.10\",\"status\":\"affected\"},{\"version\":\"1.161.13\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E39", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/35", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"vue-router\",\"versions\":[{\"version\":\"1.169.5\",\"status\":\"affected\"},{\"version\":\"1.169.8\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E40", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/36", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"vue-router-devtools\",\"versions\":[{\"version\":\"1.166.16\",\"status\":\"affected\"},{\"version\":\"1.166.19\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E41", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/37", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"vue-router-ssr-query\",\"versions\":[{\"version\":\"1.166.15\",\"status\":\"affected\"},{\"version\":\"1.166.18\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E42", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/38", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"vue-start\",\"versions\":[{\"version\":\"1.167.61\",\"status\":\"affected\"},{\"version\":\"1.167.64\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E43", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/39", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"vue-start-client\",\"versions\":[{\"version\":\"1.166.46\",\"status\":\"affected\"},{\"version\":\"1.166.49\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E44", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/40", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"vue-start-server\",\"versions\":[{\"version\":\"1.166.50\",\"status\":\"affected\"},{\"version\":\"1.166.53\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E45", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45321.json", "sourceField": "/containers/cna/affected/41", "excerpt": "{\"vendor\":\"@tanstack\",\"product\":\"zod-adapter\",\"versions\":[{\"version\":\"1.166.12\",\"status\":\"affected\"},{\"version\":\"1.166.15\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-45321（arktype-adapter / eslint-plugin-router / eslint-plugin-start / history / nitro-v2-vite-plugin / react-router / react-router-devtools / react-router-ssr-query / react-start / react-start-client / react-start-rsc / react-start-server / router-cli / rou）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・npm に公開する際に、TanStack/router 用の GitHub Actions OIDC trusted‑publisher バインディングを使用していること。\n・GitHub Actions のワークフローで pull_request_target が誤って設定されていること。\n・フォークとベースリポジトリ間で GitHub Actions のキャッシュが汚染可能であること。\n・Actions ランナーのプロセスから OIDC トークンをメモリ上で抽出できる環境であること。\n・公式の対象表：@tanstack / arktype-adapter。影響ありとして記載：1.166.12。影響ありとして記載：1.166.15。\n・公式の対象表：@tanstack / eslint-plugin-router。影響ありとして記載：1.161.9。影響ありとして記載：1.161.12。\n・公式の対象表：@tanstack / eslint-plugin-start。影響ありとして記載：0.0.4。影響ありとして記載：0.0.7。\n・公式の対象表：@tanstack / history。影響ありとして記載：1.161.9。影響ありとして記載：1.161.12。\n・公式の対象表：@tanstack / nitro-v2-vite-plugin。影響ありとして記載：1.154.12。影響ありとして記載：1.154.15。\n・公式の対象表：@tanstack / react-router。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。\n・公式の対象表：@tanstack / react-router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。\n・公式の対象表：@tanstack / react-router-ssr-query。影響ありとして記載：1.166.15。影響ありとして記載：1.166.18。\n・公式の対象表：@tanstack / react-start。影響ありとして記載：1.167.68。影響ありとして記載：1.167.71。\n・公式の対象表：@tanstack / react-start-client。影響ありとして記載：1.166.51。影響ありとして記載：1.166.54。\n・公式の対象表：@tanstack / react-start-rsc。影響ありとして記載：0.0.47。影響ありとして記載：0.0.50。\n・公式の対象表：@tanstack / react-start-server。影響ありとして記載：1.166.55。影響ありとして記載：1.166.58。\n・公式の対象表：@tanstack / router-cli。影響ありとして記載：1.166.46。影響ありとして記載：1.166.49。\n・公式の対象表：@tanstack / router-core。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。\n・公式の対象表：@tanstack / router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。\n・公式の対象表：@tanstack / router-devtools-core。影響ありとして記載：1.167.6。影響ありとして記載：1.167.9。\n・公式の対象表：@tanstack / router-generator。影響ありとして記載：1.166.45。影響ありとして記載：1.166.48。\n・公式の対象表：@tanstack / router-plugin。影響ありとして記載：1.167.38。影響ありとして記載：1.167.41。\n・公式の対象表：@tanstack / router-ssr-query-core。影響ありとして記載：1.168.3。影響ありとして記載：1.168.6。\n・公式の対象表：@tanstack / router-utils。影響ありとして記載：1.161.11。影響ありとして記載：1.161.14。\n・公式の対象表：@tanstack / outer-vite-plugin。影響ありとして記載：1.166.53。影響ありとして記載：1.166.56。\n・公式の対象表：@tanstack / solid-router。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。\n・公式の対象表：@tanstack / solid-router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。\n・公式の対象表：@tanstack / solid-router-ssr-query。影響ありとして記載：1.166.15。影響ありとして記載：1.166.18。\n・公式の対象表：@tanstack / solid-start。影響ありとして記載：1.167.65。影響ありとして記載：1.167.68。\n・公式の対象表：@tanstack / solid-start-client。影響ありとして記載：1.166.50。影響ありとして記載：1.166.53。\n・公式の対象表：@tanstack / solid-start-server。影響ありとして記載：1.166.54。影響ありとして記載：1.166.57。\n・公式の対象表：@tanstack / start-client-core。影響ありとして記載：1.168.5。影響ありとして記載：1.168.8。\n・公式の対象表：@tanstack / start-fn-stubs。影響ありとして記載：1.161.9。影響ありとして記載：1.161.12。\n・公式の対象表：@tanstack / start-plugin-core。影響ありとして記載：1.169.23。影響ありとして記載：1.169.26。\n・公式の対象表：@tanstack / start-server-core。影響ありとして記載：1.167.33。影響ありとして記載：1.167.36。\n・公式の対象表：@tanstack / start-static-server-functions。影響ありとして記載：1.166.44。影響ありとして記載：1.166.47。\n・公式の対象表：@tanstack / start-storage-context。影響ありとして記載：1.166.38。影響ありとして記載：1.166.41。\n・公式の対象表：@tanstack / valibot-adapter。影響ありとして記載：1.166.12。影響ありとして記載：1.166.15。\n・公式の対象表：@tanstack / virtual-file-routes。影響ありとして記載：1.161.10。影響ありとして記載：1.161.13。\n・公式の対象表：@tanstack / vue-router。影響ありとして記載：1.169.5。影響ありとして記載：1.169.8。\n・公式の対象表：@tanstack / vue-router-devtools。影響ありとして記載：1.166.16。影響ありとして記載：1.166.19。\n・公式の対象表：@tanstack / vue-router-ssr-query。影響ありとして記載：1.166.15。影響ありとして記載：1.166.18。\n・公式の対象表：@tanstack / vue-start。影響ありとして記載：1.167.61。影響ありとして記載：1.167.64。\n・公式の対象表：@tanstack / vue-start-client。影響ありとして記載：1.166.46。影響ありとして記載：1.166.49。\n・公式の対象表：@tanstack / vue-start-server。影響ありとして記載：1.166.50。影響ありとして記載：1.166.53。\n・公式の対象表：@tanstack / zod-adapter。影響ありとして記載：1.166.12。影響ありとして記載：1.166.15。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-45321", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:33.501Z", "lastSuccess": "2026-10-23T03:23:33.501Z", "sourceCheckedAt": "2026-10-23T02:43:49.008Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-48027", "aliases": [], "title": "nx-console：脆弱性情報", "summary": "Nx Console のバージョン 18.95.0 が 2026年5月19日 12:30 UTC に悪意のある形で Visual Studio Marketplace に公開され、12:48 UTC に削除されたため約18分間利用可能でした。OpenVSX でも同様に 12:33 UTC から 13:09 UTC まで約36分間利用可能でした。バージョン 18.100.0 は影響を受けておらず、アップグレードすることで対処できます。", "risk": "悪意のあるバージョンが配布されたことで、利用者が不正なコードにさらされる可能性があります。", "product": "nx-console", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "GitHub_M", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "nx-console", "range": "= 18.95.0" } ], "fixed": [], "steps": [ "影響を受けるバージョンを使用している場合は、Nx Console のバージョン 18.100.0 へアップグレードしてください。", "「CVE-2026-48027」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-48027", "label": "CVE公式レコード" }, { "url": "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "label": "CISAが示す関連情報" }, { "url": "https://github.com/nrwl/nx-console/issues/3139", "label": "https://github.com/nrwl/nx-console/issues/3139" }, { "url": "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "label": "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise" }, { "url": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "label": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48027", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-27T15:50:01.143Z", "modifiedAt": "2026-08-04T03:56:10.191Z", "fetchedAt": "2026-10-23T02:43:49.126Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the compromised version was available from 12:33 UTC to 13:09 UTC (~36 minutes). Version 18.100.0 of Nx Console is not compromised and users may remediate by upgrading to that version.", "sourceTitle": "Compromised Nx Console version 18.95.0", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "nrwl", "product": "nx-console", "versions": [ { "version": "= 18.95.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-48027", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "fetchedAt": "2026-10-23T02:43:49.126Z", "publishedAt": "2026-05-27T15:50:01.143Z", "modifiedAt": "2026-08-04T03:56:10.191Z", "state": "published", "provider": "GitHub_M", "title": "Compromised Nx Console version 18.95.0", "descriptions": [ { "lang": "en", "value": "Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the compromised version was available from 12:33 UTC to 13:09 UTC (~36 minutes). Version 18.100.0 of Nx Console is not compromised and users may remediate by upgrading to that version.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "nrwl", "product": "nx-console", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "= 18.95.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-506", "lang": "en", "description": "CWE-506: Embedded Malicious Code", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "label": "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/nrwl/nx-console/issues/3139", "label": "https://github.com/nrwl/nx-console/issues/3139", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "label": "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "label": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48027", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"nrwl\",\"product\":\"nx-console\",\"versions\":[{\"version\":\"= 18.95.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the compromised version was available from 12:33 UTC to 13:09 UTC (~36 minutes). Version 18.100.0 of Nx Console is not compromised and users may remediate by upgrading to that version.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-506\",\"lang\":\"en\",\"description\":\"CWE-506: Embedded Malicious Code\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:56:10.191Z", "fetchedAt": "2026-10-23T02:43:49.126Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-27T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "nx-consoleに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:33.554Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2f4d76623a8c8b8f256183dfe96562e9f59ba7e43d538e14f9e0e6beae2b6378", "sourceModifiedAt": "2026-08-04T03:56:10.191Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Nx Console のバージョン 18.95.0 が 2026年5月19日 12:30 UTC に悪意のある形で Visual Studio Marketplace に公開され、12:48 UTC に削除されたため約18分間利用可能でした。OpenVSX でも同様に 12:33 UTC から 13:09 UTC まで約36分間利用可能でした。バージョン 18.100.0 は影響を受けておらず、アップグレードすることで対処できます。", "risk": "悪意のあるバージョンが配布されたことで、利用者が不正なコードにさらされる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Nx Console バージョン 18.95.0 は影響を受ける（compromised）とされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Nx Console バージョン 18.100.0 は影響を受けていません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：nrwl / nx-console。影響ありとして記載：= 18.95.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json" ], "evidenceIds": [ "E3" ] }, { "text": "「nx-console」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-48027", "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "https://github.com/nrwl/nx-console/issues/3139", "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "https://nvd.nist.gov/vuln/detail/CVE-2026-48027" ] } ], "actions": [ { "text": "影響を受けるバージョンを使用している場合は、Nx Console のバージョン 18.100.0 へアップグレードしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2026-48027」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-48027", "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "https://github.com/nrwl/nx-console/issues/3139", "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "https://nvd.nist.gov/vuln/detail/CVE-2026-48027" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-48027", "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "https://github.com/nrwl/nx-console/issues/3139", "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "https://nvd.nist.gov/vuln/detail/CVE-2026-48027" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-48027", "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "https://github.com/nrwl/nx-console/issues/3139", "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "https://nvd.nist.gov/vuln/detail/CVE-2026-48027" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-48027", "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "https://github.com/nrwl/nx-console/issues/3139", "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "https://nvd.nist.gov/vuln/detail/CVE-2026-48027" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-48027", "label": "CVE公式レコード" }, { "url": "https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w", "label": "CISAが示す関連情報" }, { "url": "https://github.com/nrwl/nx-console/issues/3139", "label": "https://github.com/nrwl/nx-console/issues/3139" }, { "url": "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise", "label": "https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise" }, { "url": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised", "label": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48027", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the compromised version was available from 12:33 UTC to 13:09 UTC (~36 minutes). Version 18.100.0 of Nx Console is not compromised and users may remediate by upgrading to that version.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "sourceField": "/containers/cna/title", "excerpt": "Compromised Nx Console version 18.95.0", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48027.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"nrwl\",\"product\":\"nx-console\",\"versions\":[{\"version\":\"= 18.95.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48027", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-48027\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-48027（nx-console）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Nx Console バージョン 18.95.0 は影響を受ける（compromised）とされています。\n・Nx Console バージョン 18.100.0 は影響を受けていません。\n・公式の対象表：nrwl / nx-console。影響ありとして記載：= 18.95.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-48027", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:33.554Z", "lastSuccess": "2026-10-23T03:23:33.554Z", "sourceCheckedAt": "2026-10-23T02:43:49.126Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-8398", "aliases": [], "title": "DAEMON Tools Lite：脆弱性情報", "summary": "対象版の公式記載に相違があるため、以下の説明だけで対象外・修正済みと判断しないでください。公式サイト daemon-tools.cc から配布された DAEMON Tools Lite（Windows 用）のインストールパッケージ（バージョン 12.5.0.2421 から 12.5.0.2434）が、2026 年 4 月 8 日頃から 5 月 5 日までの間にサプライチェーン攻撃により改ざんされました。攻撃者はベンダー（AVB Disc Soft）のビルドまたは配布インフラに不正にアクセスし、DTHelper.exe、DiscSoftBusServiceLite.exe、DTShellHlp.exe の 3 つの実行ファイルにトロイの木馬を埋め込みました。これらのファイルは正規の AVB Disc Soft のコード署名証明書でデジタル署名されていたため、悪意あるインストーラが信頼できるものに見え、署名ベースの検出を回避できました。", "risk": "改ざんされたインストーラに含まれるマルウェアにより、利用者のシステムで不正なコードが実行される可能性があります。", "product": "DAEMON Tools Lite", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "Kaspersky", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "DAEMON Tools Lite", "range": ">= 12.5.0.2421 / < 2.6.0.*（環境: Windows）" } ], "fixed": [], "steps": [ "影響を受ける可能性のあるアプリケーションをアンインストールし、最新のウイルス定義データベースを備えたウイルス対策ソフトでシステム全体をスキャンし、公式サイトから DAEMON Tools Lite の最新バージョン（12.6 以降）をインストールしてください。", "「CVE-2026-8398」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "label": "CVE：Kaspersky" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-8398", "label": "CVE公式レコード" }, { "url": "https://securelist.com/tr/daemon-tools-backdoor/119654/", "label": "DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026" }, { "url": "https://blog.daemon-tools.cc/post/security-incident", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8398", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-15T07:30:29.287Z", "modifiedAt": "2026-05-28T03:55:20.809Z", "fetchedAt": "2026-10-23T02:43:51.275Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally signed with the legitimate AVB Disc Soft code-signing certificate, allowing the malicious installers to appear trustworthy and bypass signature-based detection.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "AVB Disc Soft", "product": "DAEMON Tools Lite", "platforms": [ "Windows" ], "versions": [ { "version": "12.5.0.2421", "versionType": "semver", "lessThan": "2.6.0.*", "status": "affected" } ], "defaultStatus": "unaffected" } ], "configurationNotes": "対象環境・機能: Windows。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-8398", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "fetchedAt": "2026-10-23T02:43:51.275Z", "publishedAt": "2026-05-15T07:30:29.287Z", "modifiedAt": "2026-05-28T03:55:20.809Z", "state": "published", "provider": "Kaspersky", "title": "", "descriptions": [ { "lang": "en", "value": "A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally signed with the legitimate AVB Disc Soft code-signing certificate, allowing the malicious installers to appear trustworthy and bypass signature-based detection.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "AVB Disc Soft", "product": "DAEMON Tools Lite", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Windows" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.5.0.2421", "lessThan": "2.6.0.*", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Users of potentially infected application are recommended to uninstall the application, run a full system scan using antivirus software with the latest version of the anti-virus databases, and install the latest version of DAEMON Tools Lite (12.6 or newer) from the official website.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-506", "lang": "en", "description": "CWE-506: Embedded Malicious Code", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "Kaspersky", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "Kaspersky", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://securelist.com/tr/daemon-tools-backdoor/119654/", "label": "DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026", "tags": [ "technical-description", "third-party-advisory" ], "provider": "Kaspersky", "sourcePath": "/containers/cna/references/0" }, { "url": "https://blog.daemon-tools.cc/post/security-incident", "label": "Security Incident Affecting DAEMON Tools Lite: What We Know So Far", "tags": [ "vendor-advisory" ], "provider": "Kaspersky", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8398", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"AVB Disc Soft\",\"product\":\"DAEMON Tools Lite\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"12.5.0.2421\",\"versionType\":\"semver\",\"lessThan\":\"2.6.0.*\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally signed with the legitimate AVB Disc Soft code-signing certificate, allowing the malicious installers to appear trustworthy and bypass signature-based detection.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Users of potentially infected application are recommended to uninstall the application, run a full system scan using antivirus software with the latest version of the anti-virus databases, and install the latest version of DAEMON Tools Lite (12.6 or newer) from the official website.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-506\",\"description\":\"CWE-506: Embedded Malicious Code\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-28T03:55:20.809Z", "fetchedAt": "2026-10-23T02:43:51.275Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-27T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "DAEMON Tools Liteに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:37:55.915Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "f096a951ece35cdb3dd0845d0c0b6cbdb434808eb6e1357a094ed43f643bb92f", "sourceModifiedAt": "2026-05-28T03:55:20.809Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "対象版の公式記載に相違があるため、以下の説明だけで対象外・修正済みと判断しないでください。公式サイト daemon-tools.cc から配布された DAEMON Tools Lite（Windows 用）のインストールパッケージ（バージョン 12.5.0.2421 から 12.5.0.2434）が、2026 年 4 月 8 日頃から 5 月 5 日までの間にサプライチェーン攻撃により改ざんされました。攻撃者はベンダー（AVB Disc Soft）のビルドまたは配布インフラに不正にアクセスし、DTHelper.exe、DiscSoftBusServiceLite.exe、DTShellHlp.exe の 3 つの実行ファイルにトロイの木馬を埋め込みました。これらのファイルは正規の AVB Disc Soft のコード署名証明書でデジタル署名されていたため、悪意あるインストーラが信頼できるものに見え、署名ベースの検出を回避できました。", "risk": "改ざんされたインストーラに含まれるマルウェアにより、利用者のシステムで不正なコードが実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象版の公式記載に相違があります。DAEMON Tools Liteについて、説明文は「12.5.0.2421から12.5.0.2434」、対象表は「12.5.0.2421以上、2.6.0.*未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるのは Windows 用 DAEMON Tools Lite のバージョン 12.5.0.2421 から 12.5.0.2434 までです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "CVE の影響対象として記載されているバージョンは 12.5.0.2421（status: affected）です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：AVB Disc Soft / DAEMON Tools Lite。影響ありとして記載：12.5.0.2421以上、2.6.0.*未満。対象の環境：Windows", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json" ], "evidenceIds": [ "E2" ] }, { "text": "「DAEMON Tools Lite」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-8398", "https://securelist.com/tr/daemon-tools-backdoor/119654/", "https://blog.daemon-tools.cc/post/security-incident", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "https://nvd.nist.gov/vuln/detail/CVE-2026-8398" ] } ], "actions": [ { "text": "影響を受ける可能性のあるアプリケーションをアンインストールし、最新のウイルス定義データベースを備えたウイルス対策ソフトでシステム全体をスキャンし、公式サイトから DAEMON Tools Lite の最新バージョン（12.6 以降）をインストールしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json" ], "evidenceIds": [ "E3" ] }, { "text": "「CVE-2026-8398」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-8398", "https://securelist.com/tr/daemon-tools-backdoor/119654/", "https://blog.daemon-tools.cc/post/security-incident", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "https://nvd.nist.gov/vuln/detail/CVE-2026-8398" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-8398", "https://securelist.com/tr/daemon-tools-backdoor/119654/", "https://blog.daemon-tools.cc/post/security-incident", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "https://nvd.nist.gov/vuln/detail/CVE-2026-8398" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-8398", "https://securelist.com/tr/daemon-tools-backdoor/119654/", "https://blog.daemon-tools.cc/post/security-incident", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "https://nvd.nist.gov/vuln/detail/CVE-2026-8398" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-8398", "https://securelist.com/tr/daemon-tools-backdoor/119654/", "https://blog.daemon-tools.cc/post/security-incident", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "https://nvd.nist.gov/vuln/detail/CVE-2026-8398" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "対象版の公式記載に相違があります。DAEMON Tools Liteについて、説明文は「12.5.0.2421から12.5.0.2434」、対象表は「12.5.0.2421以上、2.6.0.*未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "label": "CVE：Kaspersky" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-8398", "label": "CVE公式レコード" }, { "url": "https://securelist.com/tr/daemon-tools-backdoor/119654/", "label": "DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026" }, { "url": "https://blog.daemon-tools.cc/post/security-incident", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8398", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally signed with the legitimate AVB Disc Soft code-signing certificate, allowing the malicious installers to appear trustworthy and bypass signature-based detection.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"AVB Disc Soft\",\"product\":\"DAEMON Tools Lite\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"12.5.0.2421\",\"versionType\":\"semver\",\"lessThan\":\"2.6.0.*\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8398.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Users of potentially infected application are recommended to uninstall the application, run a full system scan using antivirus software with the latest version of the anti-virus databases, and install the latest version of DAEMON Tools Lite (12.6 or newer) from the official website.", "language": "en", "representation": "source_excerpt" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8398", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-8398\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-8398（DAEMON Tools Lite）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受けるのは Windows 用 DAEMON Tools Lite のバージョン 12.5.0.2421 から 12.5.0.2434 までです。\n・CVE の影響対象として記載されているバージョンは 12.5.0.2421（status: affected）です。\n・公式の対象表：AVB Disc Soft / DAEMON Tools Lite。影響ありとして記載：12.5.0.2421以上、2.6.0.*未満。対象の環境：Windows\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-8398\n\n公式資料で追加確認が必要な点：\n・対象版の公式記載に相違があります。DAEMON Tools Liteについて、説明文は「12.5.0.2421から12.5.0.2434」、対象表は「12.5.0.2421以上、2.6.0.*未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [ { "code": "affected_range_conflict", "text": "対象版の公式記載に相違があります。DAEMON Tools Liteについて、説明文は「12.5.0.2421から12.5.0.2434」、対象表は「12.5.0.2421以上、2.6.0.*未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "evidenceIds": [ "E1", "E2" ] } ], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:37:55.915Z", "lastSuccess": "2026-10-23T03:37:55.915Z", "sourceCheckedAt": "2026-10-23T02:43:51.275Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-48172", "aliases": [], "title": "cPanel Plugin / WHM Plugin：権限の奪取", "summary": "LiteSpeed のユーザー向け cPanel プラグイン（バージョン 2.4.5 未満）が特権昇格（最悪の場合 root 権限取得）を許す脆弱性が、2026 年 5 月に実際に悪用されました。検知は Bash で次のコマンドを実行し、出力が無ければ攻撃は受けていないと判断できます。`grep -rE \"cpanel_jsonapi_func=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null`。出力がある場合は、リストに含まれる IP アドレスが有効か確認し、無効であればブロックしてください。被害の有無は、検出された IP アドレスが使用したシステムログを調べて判断します。この問題は Redis の有効化/無効化機能の誤処理に起因します。推奨される最低バージョンは 2.4.7 です。", "risk": "特権昇格により、攻撃者がサーバー上で root 権限を取得できる可能性があります。", "product": "cPanel Plugin / WHM Plugin", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "4.0", "cvssSource": "mitre", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "cPanel Plugin", "range": ">= 2.3 / < 2.4.7（環境: Linux）" }, { "product": "WHM Plugin", "range": "< 5.3.1.0（環境: Linux）" } ], "fixed": [], "steps": [ "LiteSpeed WHM PlugIn をバージョン 5.3.1.0、cPanel をバージョン 2.4.7 にアップデートすると緩和できます。", "WHM をバージョン 5.2.10、cPanel をバージョン 2.4.5 以上にインストールすると多くの問題が緩和されます。", "「CVE-2026-48172」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-48172", "label": "CVE公式レコード" }, { "url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "label": "CVE掲載の参考情報" }, { "url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "label": "CVE掲載の参考情報" }, { "url": "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48172", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-21T00:38:04.489Z", "modifiedAt": "2026-10-07T18:11:52.501Z", "fetchedAt": "2026-10-23T02:43:49.128Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE \"cpanel_jsonapi_func=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "collectionURL": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/download/", "defaultStatus": "unaffected", "packageName": "WHM Plugin/cPanel Plugin", "platforms": [ "Linux" ], "product": "cPanel Plugin", "vendor": "LiteSpeed Technologies", "versions": [ { "lessThan": "2.4.7", "status": "affected", "version": "2.3", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "packageName": "WHM Plugin/cPanel Plugin", "platforms": [ "Linux" ], "product": "WHM Plugin", "vendor": "LiteSpeed Technologies", "versions": [ { "lessThan": "5.3.1.0", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "configurationNotes": "対象環境・機能: Linux。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-48172", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "fetchedAt": "2026-10-23T02:43:49.128Z", "publishedAt": "2026-05-21T00:38:04.489Z", "modifiedAt": "2026-10-07T18:11:52.501Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE \"cpanel_jsonapi_func=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "LiteSpeed Technologies", "product": "cPanel Plugin", "sourcePath": "/containers/cna/affected/0", "packageName": "WHM Plugin/cPanel Plugin", "collectionURL": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/download/", "defaultStatus": "unaffected", "platforms": [ "Linux" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2.3", "lessThan": "2.4.7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "LiteSpeed Technologies", "product": "WHM Plugin", "sourcePath": "/containers/cna/affected/1", "packageName": "WHM Plugin/cPanel Plugin", "defaultStatus": "unaffected", "platforms": [ "Linux" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "5.3.1.0", "versionType": "custom", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Installation of LiteSpeed WHM PlugIn 5.3.1.0 and cPanel 2.4.7.  Though installation of WHM 5.2.10 and cPanel 2.4.5 and above mitigate most of the issues.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-266", "lang": "en", "description": "CWE-266 Incorrect Privilege Assignment", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48172", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"collectionURL\":\"https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/download/\",\"defaultStatus\":\"unaffected\",\"packageName\":\"WHM Plugin/cPanel Plugin\",\"platforms\":[\"Linux\"],\"product\":\"cPanel Plugin\",\"vendor\":\"LiteSpeed Technologies\",\"versions\":[{\"lessThan\":\"2.4.7\",\"status\":\"affected\",\"version\":\"2.3\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"packageName\":\"WHM Plugin/cPanel Plugin\",\"platforms\":[\"Linux\"],\"product\":\"WHM Plugin\",\"vendor\":\"LiteSpeed Technologies\",\"versions\":[{\"lessThan\":\"5.3.1.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE \"cpanel_jsonapi_func=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Installation of LiteSpeed WHM PlugIn 5.3.1.0 and cPanel 2.4.7.  Though installation of WHM 5.2.10 and cPanel 2.4.5 and above mitigate most of the issues.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-266\",\"description\":\"CWE-266 Incorrect Privilege Assignment\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-07T18:11:52.501Z", "fetchedAt": "2026-10-23T02:43:49.128Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-26T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "cPanel Plugin / WHM Pluginに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:33.574Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b5d67fbc908163aa98eddaafb090ad2e2bc35f181abbe1e583f22158ac4348c2", "sourceModifiedAt": "2026-10-07T18:11:52.501Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "LiteSpeed のユーザー向け cPanel プラグイン（バージョン 2.4.5 未満）が特権昇格（最悪の場合 root 権限取得）を許す脆弱性が、2026 年 5 月に実際に悪用されました。検知は Bash で次のコマンドを実行し、出力が無ければ攻撃は受けていないと判断できます。`grep -rE \"cpanel_jsonapi_func=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null`。出力がある場合は、リストに含まれる IP アドレスが有効か確認し、無効であればブロックしてください。被害の有無は、検出された IP アドレスが使用したシステムログを調べて判断します。この問題は Redis の有効化/無効化機能の誤処理に起因します。推奨される最低バージョンは 2.4.7 です。", "risk": "特権昇格により、攻撃者がサーバー上で root 権限を取得できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "cPanel プラグイン（バージョンが 2.3 で、かつ 2.4.7 未満）は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E2" ] }, { "text": "WHM プラグイン（バージョンが 5.3.1.0 未満）は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：LiteSpeed Technologies / cPanel Plugin。影響ありとして記載：2.3以上、2.4.7未満。対象の環境：Linux", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：LiteSpeed Technologies / WHM Plugin。影響ありとして記載：5.3.1.0未満の版。対象の環境：Linux", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E2" ] }, { "text": "「cPanel Plugin / WHM Plugin」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-48172", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "https://nvd.nist.gov/vuln/detail/CVE-2026-48172" ] } ], "actions": [ { "text": "LiteSpeed WHM PlugIn をバージョン 5.3.1.0、cPanel をバージョン 2.4.7 にアップデートすると緩和できます。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E4" ] }, { "text": "WHM をバージョン 5.2.10、cPanel をバージョン 2.4.5 以上にインストールすると多くの問題が緩和されます。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2026-48172」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-48172", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "https://nvd.nist.gov/vuln/detail/CVE-2026-48172" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-48172", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "https://nvd.nist.gov/vuln/detail/CVE-2026-48172" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-48172", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "https://nvd.nist.gov/vuln/detail/CVE-2026-48172" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-48172", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "https://nvd.nist.gov/vuln/detail/CVE-2026-48172" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-48172", "label": "CVE公式レコード" }, { "url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "label": "CVE掲載の参考情報" }, { "url": "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log", "label": "CVE掲載の参考情報" }, { "url": "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48172", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE \"cpanel_jsonapi_func=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"collectionURL\":\"https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/download/\",\"defaultStatus\":\"unaffected\",\"packageName\":\"WHM Plugin/cPanel Plugin\",\"platforms\":[\"Linux\"],\"product\":\"cPanel Plugin\",\"vendor\":\"LiteSpeed Technologies\",\"versions\":[{\"lessThan\":\"2.4.7\",\"status\":\"affected\",\"version\":\"2.3\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"packageName\":\"WHM Plugin/cPanel Plugin\",\"platforms\":[\"Linux\"],\"product\":\"WHM Plugin\",\"vendor\":\"LiteSpeed Technologies\",\"versions\":[{\"lessThan\":\"5.3.1.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48172.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Installation of LiteSpeed WHM PlugIn 5.3.1.0 and cPanel 2.4.7.  Though installation of WHM 5.2.10 and cPanel 2.4.5 and above mitigate most of the issues.", "language": "en", "representation": "source_excerpt" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48172", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-48172\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-48172（cPanel Plugin / WHM Plugin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・cPanel プラグイン（バージョンが 2.3 で、かつ 2.4.7 未満）は影響を受けます。\n・WHM プラグイン（バージョンが 5.3.1.0 未満）は影響を受けます。\n・公式の対象表：LiteSpeed Technologies / cPanel Plugin。影響ありとして記載：2.3以上、2.4.7未満。対象の環境：Linux\n・公式の対象表：LiteSpeed Technologies / WHM Plugin。影響ありとして記載：5.3.1.0未満の版。対象の環境：Linux\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-48172", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:33.574Z", "lastSuccess": "2026-10-23T03:23:33.574Z", "sourceCheckedAt": "2026-10-23T02:43:49.128Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-9082", "aliases": [], "title": "Drupal core：データベースへの不正操作", "summary": "Drupal core に SQL インジェクション脆弱性があり、次のバージョンで影響を受けます。8.9.0 から 10.4.10 未満、10.5.0 から 10.5.10 未満、10.6.0 から 10.6.9 未満、11.0.0 から 11.1.10 未満、11.2.0 から 11.2.12 未満、11.3.0 から 11.3.10 未満です。", "risk": "SQL インジェクションが可能になるため、データベースへの不正操作が行われる恐れがあります。", "product": "Drupal core", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "drupal", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Drupal core", "range": ">= 8.9.0 / < 10.4.10" }, { "product": "Drupal core", "range": ">= 10.5.0 / < 10.5.10" }, { "product": "Drupal core", "range": ">= 10.6.0 / < 10.6.9" }, { "product": "Drupal core", "range": ">= 11.0.0 / < 11.1.10" }, { "product": "Drupal core", "range": ">= 11.2.0 / < 11.2.12" }, { "product": "Drupal core", "range": ">= 11.3.0 / < 11.3.10" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "label": "CVE：drupal" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-9082", "label": "CVE公式レコード" }, { "url": "https://www.drupal.org/sa-core-2026-004", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9082", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-20T18:20:52.863Z", "modifiedAt": "2026-10-07T18:32:39.894Z", "fetchedAt": "2026-10-23T02:43:52.120Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.\n\nThis issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.", "sourceTitle": "Drupal core - Highly critical - SQL injection - SA-CORE-2026-004", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Drupal", "product": "Drupal core", "collectionURL": "https://www.drupal.org/project/drupal", "repo": "https://git.drupalcode.org/project/drupal", "versions": [ { "status": "affected", "version": "8.9.0", "lessThan": "10.4.10", "versionType": "semver" }, { "status": "affected", "version": "10.5.0", "lessThan": "10.5.10", "versionType": "semver" }, { "status": "affected", "version": "10.6.0", "lessThan": "10.6.9", "versionType": "semver" }, { "status": "affected", "version": "11.0.0", "lessThan": "11.1.10", "versionType": "semver" }, { "status": "affected", "version": "11.2.0", "lessThan": "11.2.12", "versionType": "semver" }, { "status": "affected", "version": "11.3.0", "lessThan": "11.3.10", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-9082", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "fetchedAt": "2026-10-23T02:43:52.120Z", "publishedAt": "2026-05-20T18:20:52.863Z", "modifiedAt": "2026-10-07T18:32:39.894Z", "state": "published", "provider": "drupal", "title": "Drupal core - Highly critical - SQL injection - SA-CORE-2026-004", "descriptions": [ { "lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.\n\nThis issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Drupal", "product": "Drupal core", "sourcePath": "/containers/cna/affected/0", "collectionURL": "https://www.drupal.org/project/drupal", "repo": "https://git.drupalcode.org/project/drupal", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.9.0", "lessThan": "10.4.10", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "10.5.0", "lessThan": "10.5.10", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "10.6.0", "lessThan": "10.6.9", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "11.0.0", "lessThan": "11.1.10", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "11.2.0", "lessThan": "11.2.12", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "11.3.0", "lessThan": "11.3.10", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-89", "lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "drupal", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.drupal.org/sa-core-2026-004", "label": "drupal", "tags": [], "provider": "drupal", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9082", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Drupal\",\"product\":\"Drupal core\",\"collectionURL\":\"https://www.drupal.org/project/drupal\",\"repo\":\"https://git.drupalcode.org/project/drupal\",\"versions\":[{\"status\":\"affected\",\"version\":\"8.9.0\",\"lessThan\":\"10.4.10\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"10.5.0\",\"lessThan\":\"10.5.10\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"10.6.0\",\"lessThan\":\"10.6.9\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.0.0\",\"lessThan\":\"11.1.10\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.12\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.3.0\",\"lessThan\":\"11.3.10\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.\n\nThis issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-89\",\"description\":\"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-07T18:32:39.894Z", "fetchedAt": "2026-10-23T02:43:52.120Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-22T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Drupal coreにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:35.213Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2252cf0c2216e07237db8367131b107b02c2a05dffffa2d2a572fc244c2e69e5", "sourceModifiedAt": "2026-10-07T18:32:39.894Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Drupal core に SQL インジェクション脆弱性があり、次のバージョンで影響を受けます。8.9.0 から 10.4.10 未満、10.5.0 から 10.5.10 未満、10.6.0 から 10.6.9 未満、11.0.0 から 11.1.10 未満、11.2.0 から 11.2.12 未満、11.3.0 から 11.3.10 未満です。", "risk": "SQL インジェクションが可能になるため、データベースへの不正操作が行われる恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Drupal core バージョン 8.9.0 から 10.4.10 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Drupal core バージョン 10.5.0 から 10.5.10 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Drupal core バージョン 10.6.0 から 10.6.9 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Drupal core バージョン 11.0.0 から 11.1.10 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Drupal core バージョン 11.2.0 から 11.2.12 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Drupal core バージョン 11.3.0 から 11.3.10 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：Drupal / Drupal core。影響ありとして記載：8.9.0以上、10.4.10未満。影響ありとして記載：10.5.0以上、10.5.10未満。影響ありとして記載：10.6.0以上、10.6.9未満。影響ありとして記載：11.0.0以上、11.1.10未満。影響ありとして記載：11.2.0以上、11.2.12未満。影響ありとして記載：11.3.0以上、11.3.10未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Drupal core」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-9082", "https://www.drupal.org/sa-core-2026-004", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082", "https://nvd.nist.gov/vuln/detail/CVE-2026-9082" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-9082", "https://www.drupal.org/sa-core-2026-004", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082", "https://nvd.nist.gov/vuln/detail/CVE-2026-9082" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-9082", "https://www.drupal.org/sa-core-2026-004", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082", "https://nvd.nist.gov/vuln/detail/CVE-2026-9082" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "label": "CVE：drupal" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-9082", "label": "CVE公式レコード" }, { "url": "https://www.drupal.org/sa-core-2026-004", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9082", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.\n\nThis issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "sourceField": "/containers/cna/title", "excerpt": "Drupal core - Highly critical - SQL injection - SA-CORE-2026-004", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9082.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Drupal\",\"product\":\"Drupal core\",\"collectionURL\":\"https://www.drupal.org/project/drupal\",\"repo\":\"https://git.drupalcode.org/project/drupal\",\"versions\":[{\"status\":\"affected\",\"version\":\"8.9.0\",\"lessThan\":\"10.4.10\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"10.5.0\",\"lessThan\":\"10.5.10\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"10.6.0\",\"lessThan\":\"10.6.9\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.0.0\",\"lessThan\":\"11.1.10\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.12\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"11.3.0\",\"lessThan\":\"11.3.10\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9082", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-9082\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-9082（Drupal core）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Drupal core バージョン 8.9.0 から 10.4.10 未満が影響を受けます。\n・Drupal core バージョン 10.5.0 から 10.5.10 未満が影響を受けます。\n・Drupal core バージョン 10.6.0 から 10.6.9 未満が影響を受けます。\n・Drupal core バージョン 11.0.0 から 11.1.10 未満が影響を受けます。\n・Drupal core バージョン 11.2.0 から 11.2.12 未満が影響を受けます。\n・Drupal core バージョン 11.3.0 から 11.3.10 未満が影響を受けます。\n・公式の対象表：Drupal / Drupal core。影響ありとして記載：8.9.0以上、10.4.10未満。影響ありとして記載：10.5.0以上、10.5.10未満。影響ありとして記載：10.6.0以上、10.6.9未満。影響ありとして記載：11.0.0以上、11.1.10未満。影響ありとして記載：11.2.0以上、11.2.12未満。影響ありとして記載：11.3.0以上、11.3.10未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-9082", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:35.213Z", "lastSuccess": "2026-10-23T03:23:35.213Z", "sourceCheckedAt": "2026-10-23T02:43:52.120Z", "errorCode": null }, "glossary": [ { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-34291", "aliases": [], "title": "Langflow：コード実行", "summary": "Langflow のバージョン 1.6.9 まででは、CORS の設定が過剰に許可され（allow_origins='*' かつ allow_credentials=True）、リフレッシュトークン用クッキーが SameSite=None に設定されているため、悪意あるウェブページが認証情報を含むクロスオリジンリクエストを送信し、リフレッシュエンドポイントを呼び出すことができます。これにより攻撃者は被害者のセッション用の新しい access_token と refresh_token を取得し、認証が必要なエンドポイント（コード実行機能を含む）へアクセスして任意のコードを実行し、システム全体を乗っ取ることが可能になります。", "risk": "攻撃者は被害者のアカウントを乗っ取り、任意のコードを実行でき、システム全体が支配される可能性があります。", "product": "Langflow", "category": "other", "component": "package", "severity": "critical", "cvss": 9.4, "cvssVersion": "4.0", "cvssSource": "VulnCheck", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "Langflow", "range": "<= 1.6.9（機能: CORSMiddleware configuration / refresh token cookie handling）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-34291", "label": "CVE公式レコード" }, { "url": "https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/langflow-ai/langflow", "label": "CISAが示す関連情報" }, { "url": "https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/langflow-ai/langflow/releases/tag/v1.9.3", "label": "CISAが示す関連情報" }, { "url": "https://github.com/langflow-ai/langflow/issues/11465#event-25774545848", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-34291", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-12-05T22:27:26.438Z", "modifiedAt": "2026-10-08T15:21:21.340Z", "fetchedAt": "2026-10-23T02:43:37.949Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.", "sourceTitle": "Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "packageURL": "pkg:pypi/langflow", "modules": [ "CORSMiddleware configuration", "refresh token cookie handling" ], "product": "Langflow", "repo": "https://github.com/langflow-ai/langflow", "vendor": "Langflow", "versions": [ { "lessThanOrEqual": "1.6.9", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "configurationNotes": "対象環境・機能: CORSMiddleware configuration / refresh token cookie handling。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-34291", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "fetchedAt": "2026-10-23T02:43:37.949Z", "publishedAt": "2025-12-05T22:27:26.438Z", "modifiedAt": "2026-10-08T15:21:21.340Z", "state": "published", "provider": "VulnCheck", "title": "Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE", "descriptions": [ { "lang": "en", "value": "Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Langflow", "product": "Langflow", "sourcePath": "/containers/cna/affected/0", "packageURL": "pkg:pypi/langflow", "repo": "https://github.com/langflow-ai/langflow", "defaultStatus": "unaffected", "platforms": [], "modules": [ "CORSMiddleware configuration", "refresh token cookie handling" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "1.6.9", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-346", "lang": "en", "description": "CWE-346 Origin Validation Error", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.4, "baseSeverity": "CRITICAL", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform", "label": "VulnCheck", "tags": [ "technical-description", "exploit" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/langflow-ai/langflow", "label": "VulnCheck", "tags": [ "product" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce", "label": "VulnCheck", "tags": [ "third-party-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.crowdsec.net/vulntracking-report/cve-2025-34291", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34291", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"packageURL\":\"pkg:pypi/langflow\",\"modules\":[\"CORSMiddleware configuration\",\"refresh token cookie handling\"],\"product\":\"Langflow\",\"repo\":\"https://github.com/langflow-ai/langflow\",\"vendor\":\"Langflow\",\"versions\":[{\"lessThanOrEqual\":\"1.6.9\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-346\",\"description\":\"CWE-346 Origin Validation Error\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":9.4,\"baseSeverity\":\"CRITICAL\",\"exploitMaturity\":\"NOT_DEFINED\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"userInteraction\":\"PASSIVE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-08T15:21:21.340Z", "fetchedAt": "2026-10-23T02:43:37.949Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-21T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Langflowにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:35.252Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b3e5323df9ba99c12b17d952e1b9a6af0a37f59c17388a82d3426e233bdcf553", "sourceModifiedAt": "2026-10-08T15:21:21.340Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Langflow のバージョン 1.6.9 まででは、CORS の設定が過剰に許可され（allow_origins='*' かつ allow_credentials=True）、リフレッシュトークン用クッキーが SameSite=None に設定されているため、悪意あるウェブページが認証情報を含むクロスオリジンリクエストを送信し、リフレッシュエンドポイントを呼び出すことができます。これにより攻撃者は被害者のセッション用の新しい access_token と refresh_token を取得し、認証が必要なエンドポイント（コード実行機能を含む）へアクセスして任意のコードを実行し、システム全体を乗っ取ることが可能になります。", "risk": "攻撃者は被害者のアカウントを乗っ取り、任意のコードを実行でき、システム全体が支配される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Langflow の CORS 設定で allow_origins が '*' に設定され、かつ allow_credentials が True に設定されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "リフレッシュトークン用クッキーが SameSite=None に設定されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "被害者がログインしてセッションが存在し、ブラウザがそのクッキーを保持していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者が制御するオリジンから悪意あるウェブページが閲覧可能であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Langflow / Langflow。影響ありとして記載：1.6.9以下の版。対象の機能：CORSMiddleware configuration、refresh token cookie handling", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Langflow」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-34291", "https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform", "https://github.com/langflow-ai/langflow", "https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291", "https://github.com/langflow-ai/langflow/releases/tag/v1.9.3", "https://github.com/langflow-ai/langflow/issues/11465#event-25774545848", "https://nvd.nist.gov/vuln/detail/CVE-2025-34291" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-34291", "https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform", "https://github.com/langflow-ai/langflow", "https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291", "https://github.com/langflow-ai/langflow/releases/tag/v1.9.3", "https://github.com/langflow-ai/langflow/issues/11465#event-25774545848", "https://nvd.nist.gov/vuln/detail/CVE-2025-34291" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-34291", "https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform", "https://github.com/langflow-ai/langflow", "https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291", "https://github.com/langflow-ai/langflow/releases/tag/v1.9.3", "https://github.com/langflow-ai/langflow/issues/11465#event-25774545848", "https://nvd.nist.gov/vuln/detail/CVE-2025-34291" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-34291", "label": "CVE公式レコード" }, { "url": "https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/langflow-ai/langflow", "label": "CISAが示す関連情報" }, { "url": "https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/langflow-ai/langflow/releases/tag/v1.9.3", "label": "CISAが示す関連情報" }, { "url": "https://github.com/langflow-ai/langflow/issues/11465#event-25774545848", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-34291", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "sourceField": "/containers/cna/title", "excerpt": "Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/34xxx/CVE-2025-34291.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"packageURL\":\"pkg:pypi/langflow\",\"modules\":[\"CORSMiddleware configuration\",\"refresh token cookie handling\"],\"product\":\"Langflow\",\"repo\":\"https://github.com/langflow-ai/langflow\",\"vendor\":\"Langflow\",\"versions\":[{\"lessThanOrEqual\":\"1.6.9\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-34291\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-34291（Langflow）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Langflow の CORS 設定で allow_origins が '*' に設定され、かつ allow_credentials が True に設定されていること。\n・リフレッシュトークン用クッキーが SameSite=None に設定されていること。\n・被害者がログインしてセッションが存在し、ブラウザがそのクッキーを保持していること。\n・攻撃者が制御するオリジンから悪意あるウェブページが閲覧可能であること。\n・公式の対象表：Langflow / Langflow。影響ありとして記載：1.6.9以下の版。対象の機能：CORSMiddleware configuration、refresh token cookie handling\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-34291", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:35.252Z", "lastSuccess": "2026-10-23T03:23:35.252Z", "sourceCheckedAt": "2026-10-23T02:43:37.949Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-34926", "aliases": [], "title": "TrendAI Apex One / TrendAI Apex One as a Service：ファイルへの不正アクセス", "summary": "Apex One（オンプレミス版）サーバに相対パストラバーサルの脆弱性があり、事前に認証されたローカルの攻撃者がサーバ上のキー表を改ざんし、悪意のあるコードをエージェントに配布できる可能性があります。この脆弱性はオンプレミス版のみで利用可能で、攻撃者は何らかの方法でサーバの管理者権限を取得している必要があります。", "risk": "管理者権限でサーバにアクセスできる攻撃者がサーバ上のファイルを改ざんし、細工したコードがセキュリティエージェントに配布される恐れがあります。", "product": "TrendAI Apex One / TrendAI Apex One as a Service", "category": "other", "component": "package", "severity": "medium", "cvss": 6.7, "cvssVersion": "3.1", "cvssSource": "trendmicro", "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L", "affected": [ { "product": "TrendAI Apex One", "range": ">= 2019 (14.0) / < 14.0.0.17079" }, { "product": "TrendAI Apex One as a Service", "range": ">= SaaS / < 14.0.20731" } ], "fixed": [], "steps": [ "パッチを適用してください。オンプレミス版サーバは Service Pack 1 Critical Patch B18012、セキュリティエージェントは Agent Build 14.0.18012 を適用します。Trend Micro Apex One as a Service は 2026 年 4 月のメンテナンスで修正済みで、セキュリティエージェントは Agent Build 14.0.20731 を使用してください。", "「CVE-2026-34926」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://jvn.jp/vu/JVNVU90583059/", "label": "CVE：trendmicro" }, { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "label": "CVE：trendmicro" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34926", "label": "CVE公式レコード" }, { "url": "https://success.trendmicro.com/en-US/solution/KA-0023430", "label": "CISAが示す関連情報" }, { "url": "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "label": "CVE掲載の参考情報" }, { "url": "https://jvn.jp/en/vu/JVNVU90583059/", "label": "CVE掲載の参考情報" }, { "url": "https://www.jpcert.or.jp/english/at/2026/at260014.html", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34926", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-21T13:03:21.164Z", "modifiedAt": "2026-05-22T12:47:07.213Z", "fetchedAt": "2026-10-23T02:43:48.558Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.\n\n\r\nThis vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Trend Micro, Inc.", "product": "TrendAI Apex One", "versions": [ { "version": "2019 (14.0)", "status": "affected", "versionType": "semver", "lessThan": "14.0.0.17079" } ], "cpes": [ "cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*" ] }, { "vendor": "Trend Micro, Inc.", "product": "TrendAI Apex One as a Service", "versions": [ { "version": "SaaS", "status": "affected", "versionType": "semver", "lessThan": "14.0.20731" } ], "cpes": [ "cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*" ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-34926", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "fetchedAt": "2026-10-23T02:43:48.558Z", "publishedAt": "2026-05-21T13:03:21.164Z", "modifiedAt": "2026-05-22T12:47:07.213Z", "state": "published", "provider": "trendmicro", "title": "", "descriptions": [ { "lang": "en", "value": "A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.\n\n\r\nThis vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Trend Micro, Inc.", "product": "TrendAI Apex One", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2019 (14.0)", "lessThan": "14.0.0.17079", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Trend Micro, Inc.", "product": "TrendAI Apex One as a Service", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "SaaS", "lessThan": "14.0.20731", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-23", "lang": "en-US", "description": "CWE-23: Relative Path Traversal", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L", "baseScore": 6.7, "baseSeverity": "MEDIUM", "provider": "trendmicro", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://success.trendmicro.com/en-US/solution/KA-0023430", "label": "trendmicro", "tags": [], "provider": "trendmicro", "sourcePath": "/containers/cna/references/0" }, { "url": "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "label": "trendmicro", "tags": [], "provider": "trendmicro", "sourcePath": "/containers/cna/references/1" }, { "url": "https://jvn.jp/en/vu/JVNVU90583059/", "label": "trendmicro", "tags": [], "provider": "trendmicro", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.jpcert.or.jp/english/at/2026/at260014.html", "label": "trendmicro", "tags": [], "provider": "trendmicro", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34926", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"TrendAI Apex One\",\"versions\":[{\"version\":\"2019 (14.0)\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.0.17079\"}],\"cpes\":[\"cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"TrendAI Apex One as a Service\",\"versions\":[{\"version\":\"SaaS\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.20731\"}],\"cpes\":[\"cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.\n\n\r\nThis vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-23: Relative Path Traversal\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-23\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":6.7,\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "linked:JVNVU90583059:section:概要", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourcePath": "section:概要", "text": "トレンドマイクロ製企業向けエンドポイントセキュリティ製品には、複数の脆弱性が存在します。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2026-34926", "relatedJvn": "JVNVU90583059" }, { "evidenceId": "linked:JVNVU90583059:section:影響を受けるシステム", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourcePath": "section:影響を受けるシステム", "text": "TrendAI Apex One（オンプレミス版）\n\nサーバ：Build 17079より前\n\nセキュリティエージェント：Agent Build 14.0.17079より前\n\nTrend Micro Apex One as a Service\n\nサーバ：2026年4月のメンテナンスより前\n\nセキュリティエージェント：Agent Build 14.0.20731より前\n\nTrendAI Vision One Endpoint Security - Standard Endpoint Protection\n\nサーバ：2026年4月のメンテナンスより前\n\nセキュリティエージェント：Agent Build 14.0.20731より前", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2026-34926", "relatedJvn": "JVNVU90583059" }, { "evidenceId": "linked:JVNVU90583059:section:詳細情報", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourcePath": "section:詳細情報", "text": "トレンドマイクロ製企業向けエンドポイントセキュリティ製品には、次の複数の脆弱性が存在します。\n\nApex Oneサーバにおける相対パストラバーサル（ CWE-23 ）\n\nCVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H 基本値 4.9\n\nCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L 基本値 6.7\n\nCVE-2026-34926\n\n本脆弱性はTrendAI Apex One（オンプレミス版）でのみ悪用可能です\n\nセキュリティエージェントにおけるオリジン確認エラー（ CWE-346 ）\n\nCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 基本値 8.5\n\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 基本値 7.8\n\nCVE-2026-34927、CVE-2026-34928、CVE-2026-34929、CVE-2026-34930、CVE-2026-45206、CVE-2026-45207\n\nセキュリティエージェントにおけるTime-of-check Time-of-use（TOCTOU）競合状態（ CWE-367 ）\n\nCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 基本値 8.5\n\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 基本値 7.8\n\nCVE-2026-45208\n\n開発者によると、CVE-2026-34926を悪用する攻撃が既に確認されているとのことです。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2026-34926", "relatedJvn": "JVNVU90583059" }, { "evidenceId": "linked:JVNVU90583059:section:想定される影響", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourcePath": "section:想定される影響", "text": "想定される影響は各脆弱性により異なりますが、次のような影響を受ける可能性があります。\n\nApex Oneサーバに管理者権限でアクセス可能な攻撃者によってサーバ上のファイルを改ざんされ、結果として細工したコードをセキュリティエージェントに配布される（CVE-2026-34926）\n\nセキュリティエージェントにアクセス可能な攻撃者によって、権限昇格される（CVE-2026-34927、CVE-2026-34928、CVE-2026-34929、CVE-2026-34930、CVE-2026-45206、CVE-2026-45207、CVE-2026-45208）", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2026-34926", "relatedJvn": "JVNVU90583059" }, { "evidenceId": "linked:JVNVU90583059:section:対策方法", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourcePath": "section:対策方法", "text": "パッチを適用する\n\n開発者が提供する情報をもとにパッチを適用してください。\n\n開発者は本脆弱性の対策として次のパッチをリリースしています。\n\nTrendAI Apex One（オンプレミス版）\n\nサーバ：Service Pack 1 Critical Patch B18012\n\nセキュリティエージェント：Agent Build 14.0.18012\n\nTrend Micro Apex One as a Service\n\nサーバ：2026年4月のメンテナンスで修正済\n\nセキュリティエージェント：Agent Build 14.0.20731\n\nTrend Vision One Endpoint Security - Standard Endpoint Protection\n\nサーバ：2026年4月のメンテナンスで修正済\n\nセキュリティエージェント：Agent Build 14.0.20731", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2026-34926", "relatedJvn": "JVNVU90583059" }, { "evidenceId": "linked:JVNVU90583059:section:ベンダ情報", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourcePath": "section:ベンダ情報", "text": "ベンダ\n\nリンク\n\nトレンドマイクロ株式会社\n\n[サポートニュース]アラート/アドバイザリ：TrendAI™ Apex Oneなどで確認された複数の脆弱性について(2026年5月)：TrendAI™ Apex One、Trend Micro Apex One as a Service、TrendAI Vision One™ Endpoint Security - Standard Endpoint Protection", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2026-34926", "relatedJvn": "JVNVU90583059" } ], "limits": { "completeness": "official_record_with_linked_advisories", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CVEが直接参照しているJVN記事の日本語本文を、記事中のCVE番号を照合して追加しています。", "excludedJvnSources": [] }, "supplementarySources": [ { "sourceType": "JVN", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "id": "JVNVU90583059", "modifiedAt": "2026-05-20T15:00:00.000Z" } ], "relatedDocuments": [ { "type": "jvn", "id": "JVNVU90583059", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "modifiedAt": "2026-05-20T15:00:00.000Z", "affectedStatements": [ { "lang": "ja", "value": "TrendAI Apex One（オンプレミス版）\n\nサーバ：Build 17079より前\n\nセキュリティエージェント：Agent Build 14.0.17079より前\n\nTrend Micro Apex One as a Service\n\nサーバ：2026年4月のメンテナンスより前\n\nセキュリティエージェント：Agent Build 14.0.20731より前\n\nTrendAI Vision One Endpoint Security - Standard Endpoint Protection\n\nサーバ：2026年4月のメンテナンスより前\n\nセキュリティエージェント：Agent Build 14.0.20731より前", "sourcePath": "section:影響を受けるシステム" } ], "solutions": [ { "lang": "ja", "value": "パッチを適用する\n\n開発者が提供する情報をもとにパッチを適用してください。\n\n開発者は本脆弱性の対策として次のパッチをリリースしています。\n\nTrendAI Apex One（オンプレミス版）\n\nサーバ：Service Pack 1 Critical Patch B18012\n\nセキュリティエージェント：Agent Build 14.0.18012\n\nTrend Micro Apex One as a Service\n\nサーバ：2026年4月のメンテナンスで修正済\n\nセキュリティエージェント：Agent Build 14.0.20731\n\nTrend Vision One Endpoint Security - Standard Endpoint Protection\n\nサーバ：2026年4月のメンテナンスで修正済\n\nセキュリティエージェント：Agent Build 14.0.20731", "sourcePath": "section:対策方法" } ] } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-22T12:47:07.213Z", "fetchedAt": "2026-10-23T02:43:48.558Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-21T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "TrendAI Apex One / TrendAI Apex One as a Serviceにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:37:56.980Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a7b10a82793d1c5e216a9addcf4bb7ec70f8b34e0cec9b45953e9da0217b351d", "sourceModifiedAt": "2026-05-22T12:47:07.213Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Apex One（オンプレミス版）サーバに相対パストラバーサルの脆弱性があり、事前に認証されたローカルの攻撃者がサーバ上のキー表を改ざんし、悪意のあるコードをエージェントに配布できる可能性があります。この脆弱性はオンプレミス版のみで利用可能で、攻撃者は何らかの方法でサーバの管理者権限を取得している必要があります。", "risk": "管理者権限でサーバにアクセスできる攻撃者がサーバ上のファイルを改ざんし、細工したコードがセキュリティエージェントに配布される恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "TrendAI Apex One（オンプレミス版）サーバはバージョン 2019 (14.0) で、14.0.0.17079 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E3" ] }, { "text": "TrendAI Apex One as a Service（SaaS）版はバージョンが 14.0.20731 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E4" ] }, { "text": "オンプレミス版サーバは Build 17079 より前のバージョンが影響対象です。", "kind": "fact", "sourceUrls": [ "https://jvn.jp/vu/JVNVU90583059/" ], "evidenceIds": [ "E5" ] }, { "text": "オンプレミス版セキュリティエージェントは Agent Build 14.0.17079 より前が影響対象です。", "kind": "fact", "sourceUrls": [ "https://jvn.jp/vu/JVNVU90583059/" ], "evidenceIds": [ "E5" ] }, { "text": "Trend Micro Apex One as a Service のサーバは 2026 年 4 月のメンテナンス以前のバージョンが影響対象です。", "kind": "fact", "sourceUrls": [ "https://jvn.jp/vu/JVNVU90583059/" ], "evidenceIds": [ "E5" ] }, { "text": "Trend Micro Apex One as a Service のセキュリティエージェントは Agent Build 14.0.20731 より前が影響対象です。", "kind": "fact", "sourceUrls": [ "https://jvn.jp/vu/JVNVU90583059/" ], "evidenceIds": [ "E5" ] }, { "text": "攻撃者は事前にサーバへの管理者権限を取得している必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃はローカル（サーバ内部）で認証済みの状態で実行されます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E1" ] }, { "text": "この脆弱性はオンプレミス版のみで悪用可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Trend Micro, Inc. / TrendAI Apex One。影響ありとして記載：2019 (14.0)以上、14.0.0.17079未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Trend Micro, Inc. / TrendAI Apex One as a Service。影響ありとして記載：SaaS以上、14.0.20731未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E3" ] }, { "text": "「TrendAI Apex One / TrendAI Apex One as a Service」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34926", "https://success.trendmicro.com/en-US/solution/KA-0023430", "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "https://jvn.jp/en/vu/JVNVU90583059/", "https://www.jpcert.or.jp/english/at/2026/at260014.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "https://nvd.nist.gov/vuln/detail/CVE-2026-34926" ] } ], "actions": [ { "text": "パッチを適用してください。オンプレミス版サーバは Service Pack 1 Critical Patch B18012、セキュリティエージェントは Agent Build 14.0.18012 を適用します。Trend Micro Apex One as a Service は 2026 年 4 月のメンテナンスで修正済みで、セキュリティエージェントは Agent Build 14.0.20731 を使用してください。", "kind": "fix", "sourceUrls": [ "https://jvn.jp/vu/JVNVU90583059/" ], "evidenceIds": [ "E6" ] }, { "text": "「CVE-2026-34926」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-34926", "https://success.trendmicro.com/en-US/solution/KA-0023430", "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "https://jvn.jp/en/vu/JVNVU90583059/", "https://www.jpcert.or.jp/english/at/2026/at260014.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "https://nvd.nist.gov/vuln/detail/CVE-2026-34926" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34926", "https://success.trendmicro.com/en-US/solution/KA-0023430", "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "https://jvn.jp/en/vu/JVNVU90583059/", "https://www.jpcert.or.jp/english/at/2026/at260014.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "https://nvd.nist.gov/vuln/detail/CVE-2026-34926" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-34926", "https://success.trendmicro.com/en-US/solution/KA-0023430", "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "https://jvn.jp/en/vu/JVNVU90583059/", "https://www.jpcert.or.jp/english/at/2026/at260014.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "https://nvd.nist.gov/vuln/detail/CVE-2026-34926" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34926", "https://success.trendmicro.com/en-US/solution/KA-0023430", "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "https://jvn.jp/en/vu/JVNVU90583059/", "https://www.jpcert.or.jp/english/at/2026/at260014.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "https://nvd.nist.gov/vuln/detail/CVE-2026-34926" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://jvn.jp/vu/JVNVU90583059/", "label": "CVE：trendmicro" }, { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "label": "CVE：trendmicro" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34926", "label": "CVE公式レコード" }, { "url": "https://success.trendmicro.com/en-US/solution/KA-0023430", "label": "CISAが示す関連情報" }, { "url": "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "label": "CVE掲載の参考情報" }, { "url": "https://jvn.jp/en/vu/JVNVU90583059/", "label": "CVE掲載の参考情報" }, { "url": "https://www.jpcert.or.jp/english/at/2026/at260014.html", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34926", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.\n\n\r\nThis vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourceField": "section:想定される影響", "excerpt": "想定される影響は各脆弱性により異なりますが、次のような影響を受ける可能性があります。\n\nApex Oneサーバに管理者権限でアクセス可能な攻撃者によってサーバ上のファイルを改ざんされ、結果として細工したコードをセキュリティエージェントに配布される（CVE-2026-34926）\n\nセキュリティエージェントにアクセス可能な攻撃者によって、権限昇格される（CVE-2026-34927、CVE-2026-34928、CVE-2026-34929、CVE-2026-34930、CVE-2026-45206、CVE-2026-45207、CVE-2026-45208）", "language": null, "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"TrendAI Apex One\",\"versions\":[{\"version\":\"2019 (14.0)\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.0.17079\"}],\"cpes\":[\"cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*\"]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34926.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"TrendAI Apex One as a Service\",\"versions\":[{\"version\":\"SaaS\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.20731\"}],\"cpes\":[\"cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*\"]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourceField": "section:影響を受けるシステム", "excerpt": "TrendAI Apex One（オンプレミス版）\n\nサーバ：Build 17079より前\n\nセキュリティエージェント：Agent Build 14.0.17079より前\n\nTrend Micro Apex One as a Service\n\nサーバ：2026年4月のメンテナンスより前\n\nセキュリティエージェント：Agent Build 14.0.20731より前\n\nTrendAI Vision One Endpoint Security - Standard Endpoint Protection\n\nサーバ：2026年4月のメンテナンスより前\n\nセキュリティエージェント：Agent Build 14.0.20731より前", "language": null, "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://jvn.jp/vu/JVNVU90583059/", "sourceField": "section:対策方法", "excerpt": "パッチを適用する\n\n開発者が提供する情報をもとにパッチを適用してください。\n\n開発者は本脆弱性の対策として次のパッチをリリースしています。\n\nTrendAI Apex One（オンプレミス版）\n\nサーバ：Service Pack 1 Critical Patch B18012\n\nセキュリティエージェント：Agent Build 14.0.18012\n\nTrend Micro Apex One as a Service\n\nサーバ：2026年4月のメンテナンスで修正済\n\nセキュリティエージェント：Agent Build 14.0.20731\n\nTrend Vision One Endpoint Security - Standard Endpoint Protection\n\nサーバ：2026年4月のメンテナンスで修正済\n\nセキュリティエージェント：Agent Build 14.0.20731", "language": null, "representation": "source_excerpt" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-34926\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-34926（TrendAI Apex One / TrendAI Apex One as a Service）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・TrendAI Apex One（オンプレミス版）サーバはバージョン 2019 (14.0) で、14.0.0.17079 未満は影響を受けます。\n・TrendAI Apex One as a Service（SaaS）版はバージョンが 14.0.20731 未満は影響を受けます。\n・オンプレミス版サーバは Build 17079 より前のバージョンが影響対象です。\n・オンプレミス版セキュリティエージェントは Agent Build 14.0.17079 より前が影響対象です。\n・Trend Micro Apex One as a Service のサーバは 2026 年 4 月のメンテナンス以前のバージョンが影響対象です。\n・Trend Micro Apex One as a Service のセキュリティエージェントは Agent Build 14.0.20731 より前が影響対象です。\n・攻撃者は事前にサーバへの管理者権限を取得している必要があります。\n・攻撃はローカル（サーバ内部）で認証済みの状態で実行されます。\n・この脆弱性はオンプレミス版のみで悪用可能です。\n・公式の対象表：Trend Micro, Inc. / TrendAI Apex One。影響ありとして記載：2019 (14.0)以上、14.0.0.17079未満。\n・公式の対象表：Trend Micro, Inc. / TrendAI Apex One as a Service。影響ありとして記載：SaaS以上、14.0.20731未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-34926", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:37:56.980Z", "lastSuccess": "2026-10-23T03:37:56.980Z", "sourceCheckedAt": "2026-10-23T02:43:48.558Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2008-4250", "aliases": [], "title": "n/a：コード実行", "summary": "Microsoft Windows の Server サービス（Windows 2000 SP4、XP SP2 および SP3、Server 2003 SP1 と SP2、Vista Gold と SP1、Server 2008、Windows 7 Pre‑Beta）において、細工された RPC 要求がパス正規化中にオーバーフローを引き起こし、リモートの攻撃者が任意のコードを実行できる脆弱性があります。この脆弱性は 2008 年 10 月に Gimmiv.A によって実際に悪用されました（「Server Service Vulnerability」）。", "risk": "リモートの攻撃者が対象サーバー上で任意のコードを実行できるため、システムが完全に制御される危険があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4250", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2008-4250", "label": "CVE公式レコード" }, { "url": "http://marc.info/?l=bugtraq&m=122703006921213&w=2", "label": "HPSBST02386" }, { "url": "http://secunia.com/advisories/32326", "label": "32326" }, { "url": "http://www.kb.cert.org/vuls/id/827267", "label": "VU#827267" }, { "url": "http://www.securitytracker.com/id?1021091", "label": "1021091" }, { "url": "https://www.exploit-db.com/exploits/7132", "label": "7132" }, { "url": "https://www.exploit-db.com/exploits/6841", "label": "6841" }, { "url": "http://www.securityfocus.com/bid/31874", "label": "31874" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067", "label": "MS08-067" }, { "url": "http://blogs.securiteam.com/index.php/archives/1150", "label": "CVE掲載の参考情報" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4250", "label": "CISAが示す関連情報" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2008-10-23T21:00:00.000Z", "modifiedAt": "2026-05-21T03:55:20.953Z", "fetchedAt": "2026-10-23T02:42:53.466Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\"", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2008-4250", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "fetchedAt": "2026-10-23T02:42:53.466Z", "publishedAt": "2008-10-23T21:00:00.000Z", "modifiedAt": "2026-05-21T03:55:20.953Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\"", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://marc.info/?l=bugtraq&m=122703006921213&w=2", "label": "HPSBST02386", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://secunia.com/advisories/32326", "label": "32326", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://www.kb.cert.org/vuls/id/827267", "label": "VU#827267", "tags": [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.securitytracker.com/id?1021091", "label": "1021091", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.exploit-db.com/exploits/7132", "label": "7132", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://www.exploit-db.com/exploits/6841", "label": "6841", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://www.securityfocus.com/bid/31874", "label": "31874", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067", "label": "MS08-067", "tags": [ "vendor-advisory", "x_refsource_MS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://blogs.securiteam.com/index.php/archives/1150", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "https://www.exploit-db.com/exploits/6824", "label": "6824", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "http://www.vupen.com/english/advisories/2008/2902", "label": "ADV-2008-2902", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46040", "label": "win-server-rpc-code-execution(46040)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "http://www.securityfocus.com/archive/1/497808/100/0/threaded", "label": "20081026 Windows RPC MS08-067 FAQ document released", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA08-297A.html", "label": "TA08-297A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/14" }, { "url": "https://www.exploit-db.com/exploits/7104", "label": "7104", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/15" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-088A.html", "label": "TA09-088A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/16" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093", "label": "oval:org.mitre.oval:def:6093", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/17" }, { "url": "http://www.securityfocus.com/archive/1/497816/100/0/threaded", "label": "20081027 Windows RPC MS08-067 FAQ document updated", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/18" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4250", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\"", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-21T03:55:20.953Z", "fetchedAt": "2026-10-23T02:42:53.466Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:37.104Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5233a04b6f9aff619eb62a7155c1390179db0e76111048edb76fb422c08a65eb", "sourceModifiedAt": "2026-05-21T03:55:20.953Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Windows の Server サービス（Windows 2000 SP4、XP SP2 および SP3、Server 2003 SP1 と SP2、Vista Gold と SP1、Server 2008、Windows 7 Pre‑Beta）において、細工された RPC 要求がパス正規化中にオーバーフローを引き起こし、リモートの攻撃者が任意のコードを実行できる脆弱性があります。この脆弱性は 2008 年 10 月に Gimmiv.A によって実際に悪用されました（「Server Service Vulnerability」）。", "risk": "リモートの攻撃者が対象サーバー上で任意のコードを実行できるため、システムが完全に制御される危険があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Windows 2000 SP4 の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows XP SP2 の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows XP SP3 の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows Server 2003 SP1 の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows Server 2003 SP2 の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows Vista Gold の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows Vista SP1 の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows Server 2008 の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "Windows 7 Pre‑Beta の Server サービスが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4250" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E2" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2008-4250", "http://marc.info/?l=bugtraq&m=122703006921213&w=2", "http://secunia.com/advisories/32326", "http://www.kb.cert.org/vuls/id/827267", "http://www.securitytracker.com/id?1021091", "https://www.exploit-db.com/exploits/7132", "https://www.exploit-db.com/exploits/6841", "http://www.securityfocus.com/bid/31874", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067", "http://blogs.securiteam.com/index.php/archives/1150", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4250", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067", "https://nvd.nist.gov/vuln/detail/CVE-2008-4250" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json" ], "evidenceIds": [ "E2" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4250", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2008-4250", "label": "CVE公式レコード" }, { "url": "http://marc.info/?l=bugtraq&m=122703006921213&w=2", "label": "HPSBST02386" }, { "url": "http://secunia.com/advisories/32326", "label": "32326" }, { "url": "http://www.kb.cert.org/vuls/id/827267", "label": "VU#827267" }, { "url": "http://www.securitytracker.com/id?1021091", "label": "1021091" }, { "url": "https://www.exploit-db.com/exploits/7132", "label": "7132" }, { "url": "https://www.exploit-db.com/exploits/6841", "label": "6841" }, { "url": "http://www.securityfocus.com/bid/31874", "label": "31874" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067", "label": "MS08-067" }, { "url": "http://blogs.securiteam.com/index.php/archives/1150", "label": "CVE掲載の参考情報" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4250", "label": "CISAが示す関連情報" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\"", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2008/4xxx/CVE-2008-4250.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4250", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2008-4250\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2008-4250（Microsoft Windows）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 2000 SP4 の Server サービスが影響を受けます。\n・Windows XP SP2 の Server サービスが影響を受けます。\n・Windows XP SP3 の Server サービスが影響を受けます。\n・Windows Server 2003 SP1 の Server サービスが影響を受けます。\n・Windows Server 2003 SP2 の Server サービスが影響を受けます。\n・Windows Vista Gold の Server サービスが影響を受けます。\n・Windows Vista SP1 の Server サービスが影響を受けます。\n・Windows Server 2008 の Server サービスが影響を受けます。\n・Windows 7 Pre‑Beta の Server サービスが影響を受けます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2008-4250", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:37.104Z", "lastSuccess": "2026-10-23T03:23:37.104Z", "sourceCheckedAt": "2026-10-23T02:42:53.466Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2009-1537", "aliases": [], "title": "n/a：コード実行", "summary": "Microsoft DirectX の DirectShow に含まれる quartz.dll の QuickTime Movie Parser Filter に未特定の脆弱性があり、DirectX 7.0 から 9.0c まで、Windows 2000 SP4、Windows XP SP2 および SP3、Windows Server 2003 SP2 上で動作する環境で、細工された QuickTime メディアファイルを開くとリモートの攻撃者が任意のコードを実行できる可能性があります。この脆弱性は 2009 年 5 月に実際に悪用されたことが確認されています（「DirectX NULL Byte Overwrite Vulnerability」）。", "risk": "攻撃者が任意のコードを実行できるため、対象システムが制御される危険があります。", "product": "Microsoft DirectX", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2009-1537", "label": "CVE公式レコード" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "label": "MS09-028" }, { "url": "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx", "label": "CVE掲載の参考情報" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237", "label": "oval:org.mitre.oval:def:6237" }, { "url": "http://secunia.com/advisories/35268", "label": "35268" }, { "url": "http://www.securitytracker.com/id?1022299", "label": "1022299" }, { "url": "http://www.vupen.com/english/advisories/2009/1886", "label": "ADV-2009-1886" }, { "url": "http://www.vupen.com/english/advisories/2009/1445", "label": "ADV-2009-1445" }, { "url": "http://osvdb.org/54797", "label": "54797" }, { "url": "http://www.securityfocus.com/bid/35139", "label": "35139" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-195A.html", "label": "TA09-195A" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1537", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2009-05-29T18:00:00.000Z", "modifiedAt": "2026-05-21T03:55:22.095Z", "fetchedAt": "2026-10-23T02:42:53.683Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2009-1537", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "fetchedAt": "2026-10-23T02:42:53.683Z", "publishedAt": "2009-05-29T18:00:00.000Z", "modifiedAt": "2026-05-21T03:55:22.095Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "label": "MS09-028", "tags": [ "vendor-advisory", "x_refsource_MS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237", "label": "oval:org.mitre.oval:def:6237", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://secunia.com/advisories/35268", "label": "35268", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.securitytracker.com/id?1022299", "label": "1022299", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.vupen.com/english/advisories/2009/1886", "label": "ADV-2009-1886", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://www.vupen.com/english/advisories/2009/1445", "label": "ADV-2009-1445", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://osvdb.org/54797", "label": "54797", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://www.securityfocus.com/bid/35139", "label": "35139", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-195A.html", "label": "TA09-195A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://isc.sans.org/diary.html?storyid=6481", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "http://www.microsoft.com/technet/security/advisory/971778.mspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1537", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-21T03:55:22.095Z", "fetchedAt": "2026-10-23T02:42:53.683Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:38.266Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9dd2da1d24d95a74e1893b0875ffc18f46be355bfaf40962c5cede2b73a1be68", "sourceModifiedAt": "2026-05-21T03:55:22.095Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft DirectX の DirectShow に含まれる quartz.dll の QuickTime Movie Parser Filter に未特定の脆弱性があり、DirectX 7.0 から 9.0c まで、Windows 2000 SP4、Windows XP SP2 および SP3、Windows Server 2003 SP2 上で動作する環境で、細工された QuickTime メディアファイルを開くとリモートの攻撃者が任意のコードを実行できる可能性があります。この脆弱性は 2009 年 5 月に実際に悪用されたことが確認されています（「DirectX NULL Byte Overwrite Vulnerability」）。", "risk": "攻撃者が任意のコードを実行できるため、対象システムが制御される危険があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "影響を受ける製品は Microsoft DirectX のバージョン 7.0 から 9.0c までです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象となるオペレーティングシステムは Windows 2000 SP4、Windows XP SP2 および SP3、Windows Server 2003 SP2 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Microsoft DirectX」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2009-1537", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237", "http://secunia.com/advisories/35268", "http://www.securitytracker.com/id?1022299", "http://www.vupen.com/english/advisories/2009/1886", "http://www.vupen.com/english/advisories/2009/1445", "http://osvdb.org/54797", "http://www.securityfocus.com/bid/35139", "http://www.us-cert.gov/cas/techalerts/TA09-195A.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "https://nvd.nist.gov/vuln/detail/CVE-2009-1537" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2009-1537", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237", "http://secunia.com/advisories/35268", "http://www.securitytracker.com/id?1022299", "http://www.vupen.com/english/advisories/2009/1886", "http://www.vupen.com/english/advisories/2009/1445", "http://osvdb.org/54797", "http://www.securityfocus.com/bid/35139", "http://www.us-cert.gov/cas/techalerts/TA09-195A.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "https://nvd.nist.gov/vuln/detail/CVE-2009-1537" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2009-1537", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237", "http://secunia.com/advisories/35268", "http://www.securitytracker.com/id?1022299", "http://www.vupen.com/english/advisories/2009/1886", "http://www.vupen.com/english/advisories/2009/1445", "http://osvdb.org/54797", "http://www.securityfocus.com/bid/35139", "http://www.us-cert.gov/cas/techalerts/TA09-195A.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "https://nvd.nist.gov/vuln/detail/CVE-2009-1537" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2009-1537", "label": "CVE公式レコード" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "label": "MS09-028" }, { "url": "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx", "label": "CVE掲載の参考情報" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237", "label": "oval:org.mitre.oval:def:6237" }, { "url": "http://secunia.com/advisories/35268", "label": "35268" }, { "url": "http://www.securitytracker.com/id?1022299", "label": "1022299" }, { "url": "http://www.vupen.com/english/advisories/2009/1886", "label": "ADV-2009-1886" }, { "url": "http://www.vupen.com/english/advisories/2009/1445", "label": "ADV-2009-1445" }, { "url": "http://osvdb.org/54797", "label": "54797" }, { "url": "http://www.securityfocus.com/bid/35139", "label": "35139" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-195A.html", "label": "TA09-195A" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1537", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/1xxx/CVE-2009-1537.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-1537", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2009-1537\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2009-1537（Microsoft DirectX）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受ける製品は Microsoft DirectX のバージョン 7.0 から 9.0c までです。\n・対象となるオペレーティングシステムは Windows 2000 SP4、Windows XP SP2 および SP3、Windows Server 2003 SP2 です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2009-1537", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:38.266Z", "lastSuccess": "2026-10-23T03:23:38.266Z", "sourceCheckedAt": "2026-10-23T02:42:53.683Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2009-3459", "aliases": [], "title": "n/a：コード実行", "summary": "Adobe Reader および Acrobat の 7.x 系は 7.1.4 未満、8.x 系は 8.1.7 未満、9.x 系は 9.2 未満において、PDF ファイルを細工することでヒープ上のバッファがオーバーフローし、リモートの攻撃者が任意のコードを実行できる脆弱性が存在します。この脆弱性は 2009 年 10 月に実際に悪用されたことが報告されています。", "risk": "攻撃者が任意のコードを実行できる可能性があります。", "product": "Adobe Acrobat and Reader", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "adobe", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2009-3459", "label": "CVE公式レコード" }, { "url": "http://secunia.com/advisories/36983", "label": "36983" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534", "label": "oval:org.mitre.oval:def:6534" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-286B.html", "label": "TA09-286B" }, { "url": "http://securitytracker.com/id?1023007", "label": "1023007" }, { "url": "http://www.adobe.com/support/security/bulletins/apsb09-15.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.iss.net/threats/348.html", "label": "20091009 Adobe Acrobat and Acrobat Reader Remote Code Execution" }, { "url": "http://www.vupen.com/english/advisories/2009/2851", "label": "ADV-2009-2851" }, { "url": "http://isc.sans.org/diary.html?storyid=7300", "label": "CVE掲載の参考情報" }, { "url": "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.securityfocus.com/bid/36600", "label": "36600" }, { "url": "https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities", "label": "CISAが示す関連情報" }, { "url": "https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3459", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2009-10-13T10:00:00.000Z", "modifiedAt": "2026-05-21T03:55:27.999Z", "fetchedAt": "2026-10-23T02:42:53.893Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2009-3459", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "fetchedAt": "2026-10-23T02:42:53.893Z", "publishedAt": "2009-10-13T10:00:00.000Z", "modifiedAt": "2026-05-21T03:55:27.999Z", "state": "published", "provider": "adobe", "title": "", "descriptions": [ { "lang": "en", "value": "Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://secunia.com/advisories/36983", "label": "36983", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534", "label": "oval:org.mitre.oval:def:6534", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-286B.html", "label": "TA09-286B", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://securitytracker.com/id?1023007", "label": "1023007", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.adobe.com/support/security/bulletins/apsb09-15.html", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.iss.net/threats/348.html", "label": "20091009 Adobe Acrobat and Acrobat Reader Remote Code Execution", "tags": [ "third-party-advisory", "x_refsource_ISS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://www.vupen.com/english/advisories/2009/2851", "label": "ADV-2009-2851", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://isc.sans.org/diary.html?storyid=7300", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://www.securityfocus.com/bid/36600", "label": "36600", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://www.vupen.com/english/advisories/2009/2898", "label": "ADV-2009-2898", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53691", "label": "adobe-reader-pdf-code-execution(53691)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3459", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-21T03:55:27.999Z", "fetchedAt": "2026-10-23T02:42:53.893Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:38.898Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "bef00744cb6c555a12dc48cb4dcca8a09b21d73c3c1dc372f4a15595299d3638", "sourceModifiedAt": "2026-05-21T03:55:27.999Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Adobe Reader および Acrobat の 7.x 系は 7.1.4 未満、8.x 系は 8.1.7 未満、9.x 系は 9.2 未満において、PDF ファイルを細工することでヒープ上のバッファがオーバーフローし、リモートの攻撃者が任意のコードを実行できる脆弱性が存在します。この脆弱性は 2009 年 10 月に実際に悪用されたことが報告されています。", "risk": "攻撃者が任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Adobe Reader および Acrobat 7.x 系でバージョン 7.1.4 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json" ], "evidenceIds": [ "E1" ] }, { "text": "Adobe Reader および Acrobat 8.x 系でバージョン 8.1.7 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json" ], "evidenceIds": [ "E1" ] }, { "text": "Adobe Reader および Acrobat 9.x 系でバージョン 9.2 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Adobe Acrobat and Reader」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2009-3459", "http://secunia.com/advisories/36983", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534", "http://www.us-cert.gov/cas/techalerts/TA09-286B.html", "http://securitytracker.com/id?1023007", "http://www.adobe.com/support/security/bulletins/apsb09-15.html", "http://www.iss.net/threats/348.html", "http://www.vupen.com/english/advisories/2009/2851", "http://isc.sans.org/diary.html?storyid=7300", "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html", "http://www.securityfocus.com/bid/36600", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459", "https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities", "https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports", "https://nvd.nist.gov/vuln/detail/CVE-2009-3459" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2009-3459", "http://secunia.com/advisories/36983", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534", "http://www.us-cert.gov/cas/techalerts/TA09-286B.html", "http://securitytracker.com/id?1023007", "http://www.adobe.com/support/security/bulletins/apsb09-15.html", "http://www.iss.net/threats/348.html", "http://www.vupen.com/english/advisories/2009/2851", "http://isc.sans.org/diary.html?storyid=7300", "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html", "http://www.securityfocus.com/bid/36600", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459", "https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities", "https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports", "https://nvd.nist.gov/vuln/detail/CVE-2009-3459" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2009-3459", "http://secunia.com/advisories/36983", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534", "http://www.us-cert.gov/cas/techalerts/TA09-286B.html", "http://securitytracker.com/id?1023007", "http://www.adobe.com/support/security/bulletins/apsb09-15.html", "http://www.iss.net/threats/348.html", "http://www.vupen.com/english/advisories/2009/2851", "http://isc.sans.org/diary.html?storyid=7300", "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html", "http://www.securityfocus.com/bid/36600", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459", "https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities", "https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports", "https://nvd.nist.gov/vuln/detail/CVE-2009-3459" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2009-3459", "label": "CVE公式レコード" }, { "url": "http://secunia.com/advisories/36983", "label": "36983" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534", "label": "oval:org.mitre.oval:def:6534" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-286B.html", "label": "TA09-286B" }, { "url": "http://securitytracker.com/id?1023007", "label": "1023007" }, { "url": "http://www.adobe.com/support/security/bulletins/apsb09-15.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.iss.net/threats/348.html", "label": "20091009 Adobe Acrobat and Acrobat Reader Remote Code Execution" }, { "url": "http://www.vupen.com/english/advisories/2009/2851", "label": "ADV-2009-2851" }, { "url": "http://isc.sans.org/diary.html?storyid=7300", "label": "CVE掲載の参考情報" }, { "url": "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.securityfocus.com/bid/36600", "label": "36600" }, { "url": "https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities", "label": "CISAが示す関連情報" }, { "url": "https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3459", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/3xxx/CVE-2009-3459.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2009-3459\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2009-3459（Adobe Acrobat and Reader）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Adobe Reader および Acrobat 7.x 系でバージョン 7.1.4 未満が影響を受けます。\n・Adobe Reader および Acrobat 8.x 系でバージョン 8.1.7 未満が影響を受けます。\n・Adobe Reader および Acrobat 9.x 系でバージョン 9.2 未満が影響を受けます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2009-3459", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:38.898Z", "lastSuccess": "2026-10-23T03:23:38.898Z", "sourceCheckedAt": "2026-10-23T02:42:53.893Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2010-0249", "aliases": [], "title": "n/a：コード実行", "summary": "Microsoft Internet Explorer 6、6 SP1、7、8 が Windows 2000 SP4、Windows XP SP2 および SP3、Windows Server 2003 SP2、Windows Vista Gold、SP1、SP2、Windows Server 2008 Gold、SP2、R2、そして Windows 7 上で、削除されたオブジェクトに関連付けられたポインタにアクセスできるようになる Use‑after‑free の脆弱性が存在します。この脆弱性は、メモリが正しく初期化されていないことと、メモリ内のオブジェクトの不適切な取り扱いに起因し、2009 年 12 月と 2010 年 1 月に Operation Aurora（別名「HTML Object Memory Corruption Vulnerability」）として実際に悪用されました。", "risk": "リモートの攻撃者が任意のコードを実行できる可能性があります。", "product": "Microsoft Internet Explorer", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2010-0249", "label": "CVE公式レコード" }, { "url": "http://www.microsoft.com/technet/security/advisory/979352.mspx", "label": "CVE掲載の参考情報" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835", "label": "oval:org.mitre.oval:def:6835" }, { "url": "http://osvdb.org/61697", "label": "61697" }, { "url": "http://www.securityfocus.com/bid/37815", "label": "37815" }, { "url": "http://www.kb.cert.org/vuls/id/492515", "label": "VU#492515" }, { "url": "http://www.exploit-db.com/exploits/11167", "label": "11167" }, { "url": "http://support.microsoft.com/kb/979352", "label": "979352" }, { "url": "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "label": "CVE掲載の参考情報" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55642", "label": "ie-freed-object-code-execution(55642)" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-055A.html", "label": "TA10-055A" }, { "url": "https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0249", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2010-01-15T17:00:00.000Z", "modifiedAt": "2026-05-21T03:55:30.221Z", "fetchedAt": "2026-10-23T02:42:54.076Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2010-0249", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "fetchedAt": "2026-10-23T02:42:54.076Z", "publishedAt": "2010-01-15T17:00:00.000Z", "modifiedAt": "2026-05-21T03:55:30.221Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.microsoft.com/technet/security/advisory/979352.mspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835", "label": "oval:org.mitre.oval:def:6835", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://osvdb.org/61697", "label": "61697", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.securityfocus.com/bid/37815", "label": "37815", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.kb.cert.org/vuls/id/492515", "label": "VU#492515", "tags": [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.exploit-db.com/exploits/11167", "label": "11167", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://support.microsoft.com/kb/979352", "label": "979352", "tags": [ "vendor-advisory", "x_refsource_MSKB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55642", "label": "ie-freed-object-code-execution(55642)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-055A.html", "label": "TA10-055A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "label": "MS10-002", "tags": [ "vendor-advisory", "x_refsource_MS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "http://news.cnet.com/8301-27080_3-10435232-245.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "http://securitytracker.com/id?1023462", "label": "1023462", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "http://www.vupen.com/english/advisories/2010/0135", "label": "ADV-2010-0135", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0249", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-21T03:55:30.221Z", "fetchedAt": "2026-10-23T02:42:54.076Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:39.692Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "628660ea51fe8df51f6b62c2ef49f1d5b4651334fcbfa76969f00d086240df38", "sourceModifiedAt": "2026-05-21T03:55:30.221Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Internet Explorer 6、6 SP1、7、8 が Windows 2000 SP4、Windows XP SP2 および SP3、Windows Server 2003 SP2、Windows Vista Gold、SP1、SP2、Windows Server 2008 Gold、SP2、R2、そして Windows 7 上で、削除されたオブジェクトに関連付けられたポインタにアクセスできるようになる Use‑after‑free の脆弱性が存在します。この脆弱性は、メモリが正しく初期化されていないことと、メモリ内のオブジェクトの不適切な取り扱いに起因し、2009 年 12 月と 2010 年 1 月に Operation Aurora（別名「HTML Object Memory Corruption Vulnerability」）として実際に悪用されました。", "risk": "リモートの攻撃者が任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "影響を受ける製品は Internet Explorer 6、6 SP1、7、8 で、対象 OS は Windows 2000 SP4、Windows XP SP2・SP3、Windows Server 2003 SP2、Windows Vista Gold・SP1・SP2、Windows Server 2008 Gold・SP2・R2、Windows 7 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Microsoft Internet Explorer」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2010-0249", "http://www.microsoft.com/technet/security/advisory/979352.mspx", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835", "http://osvdb.org/61697", "http://www.securityfocus.com/bid/37815", "http://www.kb.cert.org/vuls/id/492515", "http://www.exploit-db.com/exploits/11167", "http://support.microsoft.com/kb/979352", "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "https://exchange.xforce.ibmcloud.com/vulnerabilities/55642", "http://www.us-cert.gov/cas/techalerts/TA10-055A.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249", "https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352", "https://nvd.nist.gov/vuln/detail/CVE-2010-0249" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2010-0249", "http://www.microsoft.com/technet/security/advisory/979352.mspx", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835", "http://osvdb.org/61697", "http://www.securityfocus.com/bid/37815", "http://www.kb.cert.org/vuls/id/492515", "http://www.exploit-db.com/exploits/11167", "http://support.microsoft.com/kb/979352", "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "https://exchange.xforce.ibmcloud.com/vulnerabilities/55642", "http://www.us-cert.gov/cas/techalerts/TA10-055A.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249", "https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352", "https://nvd.nist.gov/vuln/detail/CVE-2010-0249" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2010-0249", "http://www.microsoft.com/technet/security/advisory/979352.mspx", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835", "http://osvdb.org/61697", "http://www.securityfocus.com/bid/37815", "http://www.kb.cert.org/vuls/id/492515", "http://www.exploit-db.com/exploits/11167", "http://support.microsoft.com/kb/979352", "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "https://exchange.xforce.ibmcloud.com/vulnerabilities/55642", "http://www.us-cert.gov/cas/techalerts/TA10-055A.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249", "https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352", "https://nvd.nist.gov/vuln/detail/CVE-2010-0249" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2010-0249", "label": "CVE公式レコード" }, { "url": "http://www.microsoft.com/technet/security/advisory/979352.mspx", "label": "CVE掲載の参考情報" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835", "label": "oval:org.mitre.oval:def:6835" }, { "url": "http://osvdb.org/61697", "label": "61697" }, { "url": "http://www.securityfocus.com/bid/37815", "label": "37815" }, { "url": "http://www.kb.cert.org/vuls/id/492515", "label": "VU#492515" }, { "url": "http://www.exploit-db.com/exploits/11167", "label": "11167" }, { "url": "http://support.microsoft.com/kb/979352", "label": "979352" }, { "url": "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "label": "CVE掲載の参考情報" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55642", "label": "ie-freed-object-code-execution(55642)" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-055A.html", "label": "TA10-055A" }, { "url": "https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0249", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0249.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0249", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2010-0249\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2010-0249（Microsoft Internet Explorer）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受ける製品は Internet Explorer 6、6 SP1、7、8 で、対象 OS は Windows 2000 SP4、Windows XP SP2・SP3、Windows Server 2003 SP2、Windows Vista Gold・SP1・SP2、Windows Server 2008 Gold・SP2・R2、Windows 7 です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2010-0249", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:39.692Z", "lastSuccess": "2026-10-23T03:23:39.692Z", "sourceCheckedAt": "2026-10-23T02:42:54.076Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2010-0806", "aliases": [], "title": "n/a：コード実行", "summary": "Microsoft Internet Explorer 6、6 SP1、7 の Peer Objects コンポーネント (iepeers.dll) において、オブジェクトが削除された後に無効なポインタへアクセスすることで発生する Use‑after‑free の脆弱性があり、リモートの攻撃者が任意のコードを実行できる可能性があります。この脆弱性は 2010 年 3 月に実際に悪用されたことが報告されています。", "risk": "攻撃者が対象のブラウザー上で任意のコードを実行できるため、システムが乗っ取られるなどの被害が生じる可能性があります。", "product": "Microsoft Internet Explorer", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2010-0806", "label": "CVE公式レコード" }, { "url": "http://osvdb.org/62810", "label": "62810" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "label": "TA10-089A" }, { "url": "http://www.securityfocus.com/bid/38615", "label": "38615" }, { "url": "http://www.vupen.com/english/advisories/2010/0567", "label": "ADV-2010-0567" }, { "url": "http://secunia.com/advisories/38860", "label": "38860" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "label": "TA10-068A" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "label": "MS10-018" }, { "url": "http://www.microsoft.com/technet/security/advisory/981374.mspx", "label": "CVE掲載の参考情報" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56772", "label": "ms-ie-useafterfree-code-execution(56772)" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446", "label": "oval:org.mitre.oval:def:8446" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0806", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2010-03-10T22:00:00.000Z", "modifiedAt": "2026-05-21T03:55:29.109Z", "fetchedAt": "2026-10-23T02:42:54.115Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2010-0806", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "fetchedAt": "2026-10-23T02:42:54.115Z", "publishedAt": "2010-03-10T22:00:00.000Z", "modifiedAt": "2026-05-21T03:55:29.109Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://osvdb.org/62810", "label": "62810", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "label": "TA10-089A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://www.securityfocus.com/bid/38615", "label": "38615", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.vupen.com/english/advisories/2010/0567", "label": "ADV-2010-0567", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://secunia.com/advisories/38860", "label": "38860", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "label": "TA10-068A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "label": "MS10-018", "tags": [ "vendor-advisory", "x_refsource_MS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://www.microsoft.com/technet/security/advisory/981374.mspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56772", "label": "ms-ie-useafterfree-code-execution(56772)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446", "label": "oval:org.mitre.oval:def:8446", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://www.vupen.com/english/advisories/2010/0744", "label": "ADV-2010-0744", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "http://www.kb.cert.org/vuls/id/744549", "label": "VU#744549", "tags": [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0806", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-21T03:55:29.109Z", "fetchedAt": "2026-10-23T02:42:54.115Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:37:57.735Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "12c7030becff976906a3491924a8f19e2aecb9ae59a4984e2c8b519f36993025", "sourceModifiedAt": "2026-05-21T03:55:29.109Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Internet Explorer 6、6 SP1、7 の Peer Objects コンポーネント (iepeers.dll) において、オブジェクトが削除された後に無効なポインタへアクセスすることで発生する Use‑after‑free の脆弱性があり、リモートの攻撃者が任意のコードを実行できる可能性があります。この脆弱性は 2010 年 3 月に実際に悪用されたことが報告されています。", "risk": "攻撃者が対象のブラウザー上で任意のコードを実行できるため、システムが乗っ取られるなどの被害が生じる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Microsoft Internet Explorer」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2010-0806", "http://osvdb.org/62810", "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "http://www.securityfocus.com/bid/38615", "http://www.vupen.com/english/advisories/2010/0567", "http://secunia.com/advisories/38860", "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "http://www.microsoft.com/technet/security/advisory/981374.mspx", "https://exchange.xforce.ibmcloud.com/vulnerabilities/56772", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806", "https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374", "https://nvd.nist.gov/vuln/detail/CVE-2010-0806" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2010-0806", "http://osvdb.org/62810", "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "http://www.securityfocus.com/bid/38615", "http://www.vupen.com/english/advisories/2010/0567", "http://secunia.com/advisories/38860", "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "http://www.microsoft.com/technet/security/advisory/981374.mspx", "https://exchange.xforce.ibmcloud.com/vulnerabilities/56772", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806", "https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374", "https://nvd.nist.gov/vuln/detail/CVE-2010-0806" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2010-0806", "http://osvdb.org/62810", "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "http://www.securityfocus.com/bid/38615", "http://www.vupen.com/english/advisories/2010/0567", "http://secunia.com/advisories/38860", "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "http://www.microsoft.com/technet/security/advisory/981374.mspx", "https://exchange.xforce.ibmcloud.com/vulnerabilities/56772", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806", "https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374", "https://nvd.nist.gov/vuln/detail/CVE-2010-0806" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2010-0806", "label": "CVE公式レコード" }, { "url": "http://osvdb.org/62810", "label": "62810" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "label": "TA10-089A" }, { "url": "http://www.securityfocus.com/bid/38615", "label": "38615" }, { "url": "http://www.vupen.com/english/advisories/2010/0567", "label": "ADV-2010-0567" }, { "url": "http://secunia.com/advisories/38860", "label": "38860" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "label": "TA10-068A" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "label": "MS10-018" }, { "url": "http://www.microsoft.com/technet/security/advisory/981374.mspx", "label": "CVE掲載の参考情報" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56772", "label": "ms-ie-useafterfree-code-execution(56772)" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446", "label": "oval:org.mitre.oval:def:8446" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0806", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2010/0xxx/CVE-2010-0806.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2010-0806\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2010-0806（Microsoft Internet Explorer）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2010-0806", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:37:57.735Z", "lastSuccess": "2026-10-23T03:37:57.735Z", "sourceCheckedAt": "2026-10-23T02:42:54.115Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-41091", "aliases": [], "title": "Microsoft Malware Protection Engine：権限の奪取", "summary": "Microsoft Defender のリンク解決の不備（リンクフォロー）により、認可された攻撃者がローカルで権限を昇格できる。", "risk": "攻撃者がローカルで権限を昇格できる可能性がある。", "product": "Microsoft Malware Protection Engine", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Microsoft Malware Protection Engine", "range": ">= 1.1.0.0 / < 1.1.26040.8" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41091", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091", "label": "Microsoft Defender Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41091", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-20T13:09:13.634Z", "modifiedAt": "2026-08-10T15:13:49.938Z", "fetchedAt": "2026-10-23T02:43:48.785Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft Defender Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft Malware Protection Engine", "versions": [ { "version": "1.1.0.0", "lessThan": "1.1.26040.8", "versionType": "custom", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-41091", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "fetchedAt": "2026-10-23T02:43:48.785Z", "publishedAt": "2026-05-20T13:09:13.634Z", "modifiedAt": "2026-08-10T15:13:49.938Z", "state": "published", "provider": "microsoft", "title": "Microsoft Defender Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft Malware Protection Engine", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "1.1.0.0", "lessThan": "1.1.26040.8", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-59", "lang": "en-US", "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091", "label": "Microsoft Defender Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-41091", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Malware Protection Engine\",\"versions\":[{\"version\":\"1.1.0.0\",\"lessThan\":\"1.1.26040.8\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-59: Improper Link Resolution Before File Access ('Link Following')\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-59\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-10T15:13:49.938Z", "fetchedAt": "2026-10-23T02:43:48.785Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft Malware Protection Engineに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:43.152Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a32a9feca2e16af9ef4fcac0aba1fd950de8125e19680b9f7148fc695fd2fbf3", "sourceModifiedAt": "2026-08-10T15:13:49.938Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Defender のリンク解決の不備（リンクフォロー）により、認可された攻撃者がローカルで権限を昇格できる。", "risk": "攻撃者がローカルで権限を昇格できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Microsoft Malware Protection Engine のバージョン 1.1.0.0 以上 1.1.26040.8 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "認可された攻撃者がローカルでこの欠陥を利用できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft Malware Protection Engine。影響ありとして記載：1.1.0.0以上、1.1.26040.8未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft Malware Protection Engine」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-41091", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091", "https://nvd.nist.gov/vuln/detail/CVE-2026-41091" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-41091", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091", "https://nvd.nist.gov/vuln/detail/CVE-2026-41091" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-41091", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091", "https://nvd.nist.gov/vuln/detail/CVE-2026-41091" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41091", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091", "label": "Microsoft Defender Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41091", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft Defender Elevation of Privilege Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41091.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Malware Protection Engine\",\"versions\":[{\"version\":\"1.1.0.0\",\"lessThan\":\"1.1.26040.8\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41091", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-41091\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-41091（Microsoft Malware Protection Engine）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Malware Protection Engine のバージョン 1.1.0.0 以上 1.1.26040.8 未満が影響を受ける。\n・認可された攻撃者がローカルでこの欠陥を利用できる。\n・公式の対象表：Microsoft / Microsoft Malware Protection Engine。影響ありとして記載：1.1.0.0以上、1.1.26040.8未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-41091", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:43.152Z", "lastSuccess": "2026-10-23T03:23:43.152Z", "sourceCheckedAt": "2026-10-23T02:43:48.785Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-45498", "aliases": [], "title": "Microsoft Defender Antimalware Platform：サービス停止", "summary": "Microsoft Defender Antimalware Platform において、サービスが利用できなくなる（Denial of Service）脆弱性が存在します。", "risk": "攻撃者がこの脆弱性を利用すると、Microsoft Defender の機能が停止し、保護が機能しなくなる可能性があります。", "product": "Microsoft Defender Antimalware Platform", "category": "other", "component": "package", "severity": "medium", "cvss": 4, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C", "affected": [ { "product": "Microsoft Defender Antimalware Platform", "range": ">= 4.0.0.0 / < 4.18.26040.7" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-45498", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498", "label": "Microsoft Defender Denial of Service Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45498", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-20T13:09:12.903Z", "modifiedAt": "2026-08-10T15:13:18.090Z", "fetchedAt": "2026-10-23T02:43:49.027Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft Defender Denial of Service Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft Defender Antimalware Platform", "versions": [ { "version": "4.0.0.0", "lessThan": "4.18.26040.7", "versionType": "custom", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-45498", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "fetchedAt": "2026-10-23T02:43:49.027Z", "publishedAt": "2026-05-20T13:09:12.903Z", "modifiedAt": "2026-08-10T15:13:18.090Z", "state": "published", "provider": "microsoft", "title": "Microsoft Defender Denial of Service Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Microsoft Defender Denial of Service Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft Defender Antimalware Platform", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "4.0.0.0", "lessThan": "4.18.26040.7", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-400", "lang": "en-US", "description": "CWE-400: Uncontrolled Resource Consumption", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C", "baseScore": 4, "baseSeverity": "MEDIUM", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498", "label": "Microsoft Defender Denial of Service Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45498", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Defender Antimalware Platform\",\"versions\":[{\"version\":\"4.0.0.0\",\"lessThan\":\"4.18.26040.7\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Microsoft Defender Denial of Service Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-400: Uncontrolled Resource Consumption\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-400\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":4,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-10T15:13:18.090Z", "fetchedAt": "2026-10-23T02:43:49.027Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft Defender Antimalware Platformにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:43.467Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c1d6c317c21405c5e89e3d44a52d39412a0f100ec6323f682b4174971ca2b52a", "sourceModifiedAt": "2026-08-10T15:13:18.090Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Defender Antimalware Platform において、サービスが利用できなくなる（Denial of Service）脆弱性が存在します。", "risk": "攻撃者がこの脆弱性を利用すると、Microsoft Defender の機能が停止し、保護が機能しなくなる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Microsoft Defender Antimalware Platform のバージョン 4.0.0.0 から 4.18.26040.7 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft Defender Antimalware Platform。影響ありとして記載：4.0.0.0以上、4.18.26040.7未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft Defender Antimalware Platform」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-45498", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498", "https://nvd.nist.gov/vuln/detail/CVE-2026-45498" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-45498", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498", "https://nvd.nist.gov/vuln/detail/CVE-2026-45498" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-45498", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498", "https://nvd.nist.gov/vuln/detail/CVE-2026-45498" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-45498", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498", "label": "Microsoft Defender Denial of Service Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45498", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Microsoft Defender Denial of Service Vulnerability", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft Defender Denial of Service Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45498.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Defender Antimalware Platform\",\"versions\":[{\"version\":\"4.0.0.0\",\"lessThan\":\"4.18.26040.7\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-45498", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-45498\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-45498（Microsoft Defender Antimalware Platform）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Defender Antimalware Platform のバージョン 4.0.0.0 から 4.18.26040.7 未満が影響を受けます。\n・公式の対象表：Microsoft / Microsoft Defender Antimalware Platform。影響ありとして記載：4.0.0.0以上、4.18.26040.7未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-45498", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:43.467Z", "lastSuccess": "2026-10-23T03:23:43.467Z", "sourceCheckedAt": "2026-10-23T02:43:49.027Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-42897", "aliases": [], "title": "Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 14 / Microsoft Exchange Server 2019 Cumulative Update 15 / Microsoft Exchange Server Subscription Edition RTM：脆弱性情報", "summary": "Microsoft Exchange Server でウェブページ生成時に入力の中和が不適切に行われる（クロスサイトスクリプティング）ため、認可されていない攻撃者がネットワーク上でなりすましを行える。", "risk": "攻撃者がなりすましを行い、ユーザーやシステムを騙す可能性がある。", "product": "Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 14 / Microsoft Exchange Server 2019 Cumulative Update 15 / Microsoft Exchange Server Subscription Edition RTM", "category": "other", "component": "package", "severity": "high", "cvss": 8.1, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C", "affected": [ { "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "range": ">= 15.01.0.0 / < 15.01.2507.069（環境: x64-based Systems）" }, { "product": "Microsoft Exchange Server 2019 Cumulative Update 14", "range": ">= 15.02.0.0 / < 15.02.1544.041（環境: x64-based Systems）" }, { "product": "Microsoft Exchange Server 2019 Cumulative Update 15", "range": ">= 15.02.0.0 / < 15.02.1748.046（環境: x64-based Systems）" }, { "product": "Microsoft Exchange Server Subscription Edition RTM", "range": ">= 15.02.0.0 / < 15.02.2562.043（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42897", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897", "label": "Microsoft Exchange Server Spoofing Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-42897", "label": "CISAが示す関連情報" }, { "url": "https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42897", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-14T17:00:36.515Z", "modifiedAt": "2026-08-10T15:14:02.885Z", "fetchedAt": "2026-10-23T02:43:48.942Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft Exchange Server Spoofing Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.01.0.0", "lessThan": "15.01.2507.069", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 14", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.02.0.0", "lessThan": "15.02.1544.041", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 15", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.02.0.0", "lessThan": "15.02.1748.046", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server Subscription Edition RTM", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.02.0.0", "lessThan": "15.02.2562.043", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-42897", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "fetchedAt": "2026-10-23T02:43:48.942Z", "publishedAt": "2026-05-14T17:00:36.515Z", "modifiedAt": "2026-08-10T15:14:02.885Z", "state": "published", "provider": "microsoft", "title": "Microsoft Exchange Server Spoofing Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "15.01.0.0", "lessThan": "15.01.2507.069", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 14", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "15.02.0.0", "lessThan": "15.02.1544.041", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 15", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "15.02.0.0", "lessThan": "15.02.1748.046", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server Subscription Edition RTM", "sourcePath": "/containers/cna/affected/3", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "15.02.0.0", "lessThan": "15.02.2562.043", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en-US", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C", "baseScore": 8.1, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897", "label": "Microsoft Exchange Server Spoofing Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42897", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0.0\",\"lessThan\":\"15.01.2507.069\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0.0\",\"lessThan\":\"15.02.1544.041\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0.0\",\"lessThan\":\"15.02.1748.046\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server Subscription Edition RTM\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0.0\",\"lessThan\":\"15.02.2562.043\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-79\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.1,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-10T15:14:02.885Z", "fetchedAt": "2026-10-23T02:43:48.942Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-15T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 14 / Microsoft Exchange Server 2019 Cumulative Update 15 / Microsoft Exchange Server Subscription Edition RTMに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:43.600Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "055fed26923bc2c66792e587d60b5d2f458c8fc5512e609ce649514533553820", "sourceModifiedAt": "2026-08-10T15:14:02.885Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Exchange Server でウェブページ生成時に入力の中和が不適切に行われる（クロスサイトスクリプティング）ため、認可されていない攻撃者がネットワーク上でなりすましを行える。", "risk": "攻撃者がなりすましを行い、ユーザーやシステムを騙す可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Microsoft Exchange Server 2016 Cumulative Update 23（バージョン 15.01.0.0 以上、15.01.2507.069 未満）の x64 ベースシステムは影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Microsoft Exchange Server 2019 Cumulative Update 14（バージョン 15.02.0.0 以上、15.02.1544.041 未満）の x64 ベースシステムは影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Microsoft Exchange Server 2019 Cumulative Update 15（バージョン 15.02.0.0 以上、15.02.1748.046 未満）の x64 ベースシステムは影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "Microsoft Exchange Server Subscription Edition RTM（バージョン 15.02.0.0 以上、15.02.2562.043 未満）の x64 ベースシステムは影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E6", "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23。影響ありとして記載：15.01.0.0以上、15.01.2507.069未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 14。影響ありとして記載：15.02.0.0以上、15.02.1544.041未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 15。影響ありとして記載：15.02.0.0以上、15.02.1748.046未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server Subscription Edition RTM。影響ありとして記載：15.02.0.0以上、15.02.2562.043未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 14 / Microsoft Exchange Server 2019 Cumulative Update 15 / Microsoft Exchange Server Subscription Edition RTM」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-42897", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-42897", "https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service", "https://nvd.nist.gov/vuln/detail/CVE-2026-42897" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-42897", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-42897", "https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service", "https://nvd.nist.gov/vuln/detail/CVE-2026-42897" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-42897", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-42897", "https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service", "https://nvd.nist.gov/vuln/detail/CVE-2026-42897" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42897", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897", "label": "Microsoft Exchange Server Spoofing Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-42897", "label": "CISAが示す関連情報" }, { "url": "https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42897", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft Exchange Server Spoofing Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0.0\",\"lessThan\":\"15.01.2507.069\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0.0\",\"lessThan\":\"15.02.1544.041\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0.0\",\"lessThan\":\"15.02.1748.046\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42897.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server Subscription Edition RTM\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0.0\",\"lessThan\":\"15.02.2562.043\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42897", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-42897\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-42897（Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 14 / Microsoft Exchange Server 2019 Cumulative Update 15 / Microsoft Exchange Server Subscription Edition RTM）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Exchange Server 2016 Cumulative Update 23（バージョン 15.01.0.0 以上、15.01.2507.069 未満）の x64 ベースシステムは影響を受ける。\n・Microsoft Exchange Server 2019 Cumulative Update 14（バージョン 15.02.0.0 以上、15.02.1544.041 未満）の x64 ベースシステムは影響を受ける。\n・Microsoft Exchange Server 2019 Cumulative Update 15（バージョン 15.02.0.0 以上、15.02.1748.046 未満）の x64 ベースシステムは影響を受ける。\n・Microsoft Exchange Server Subscription Edition RTM（バージョン 15.02.0.0 以上、15.02.2562.043 未満）の x64 ベースシステムは影響を受ける。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23。影響ありとして記載：15.01.0.0以上、15.01.2507.069未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 14。影響ありとして記載：15.02.0.0以上、15.02.1544.041未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 15。影響ありとして記載：15.02.0.0以上、15.02.1748.046未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server Subscription Edition RTM。影響ありとして記載：15.02.0.0以上、15.02.2562.043未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-42897", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:43.600Z", "lastSuccess": "2026-10-23T03:23:43.600Z", "sourceCheckedAt": "2026-10-23T02:43:48.942Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } } ], "total": 2197, "limit": 20, "offset": 540, "filters": { "product": "all", "type": "all", "q": "", "page": 28 }, "pagination": { "page": 28, "pageSize": 20, "totalPages": 110 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T21:17:50.096Z", "lastAttempt": "2026-10-23T21:17:50.096Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-23T21:17:50.096Z", "lastAttempt": "2026-10-23T21:17:50.096Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T21:17:50.096Z", "lastAttempt": "2026-10-23T21:17:50.096Z", "error": null, "recordCount": 1755, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "partial", "lastSuccess": "2026-10-23T19:17:50.573Z", "lastAttempt": "2026-10-23T21:17:50.096Z", "error": "未確認のページ・期間は次回の定期取得で続きから反映します。", "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T19:02:50.573Z 〜 2026-10-23T21:17:50.096Z、全製品の変更 500/2183件まで確認、対象0件反映。", "cursor": { "start": "2026-10-23T19:02:50.573Z", "end": "2026-10-23T21:17:50.096Z", "kind": "modified", "index": 500 }, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T21:17:50.096Z", "lastAttempt": "2026-10-23T21:17:50.096Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }