{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-6973", "aliases": [], "title": "Endpoint Manager Mobile：コード実行", "summary": "Ivanti Endpoint Manager Mobile のバージョン 12.6.1.1、12.7.0.1、12.8.0.1 より前のバージョンにおいて、入力値の検証が不適切であるため、管理者権限を持つリモート認証ユーザーがリモートコード実行を行える。", "risk": "攻撃者がリモートでコードを実行できるため、サーバーや機器に攻撃者の命令を実行させられる可能性がある。", "product": "Endpoint Manager Mobile", "category": "other", "component": "package", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "ivanti", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Endpoint Manager Mobile", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-6973", "label": "CVE公式レコード" }, { "url": "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs", "label": "CVE掲載の参考情報" }, { "url": "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6973", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-07T15:21:24.849Z", "modifiedAt": "2026-06-11T16:17:26.449Z", "fetchedAt": "2026-10-23T02:43:50.142Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Ivanti", "product": "Endpoint Manager Mobile", "versions": [ { "status": "unaffected", "version": "12.8.0.1", "versionType": "custom" }, { "status": "unaffected", "version": "12.7.0.1", "versionType": "custom" }, { "status": "unaffected", "version": "12.6.1.1", "versionType": "custom" } ], "defaultStatus": "affected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-6973", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "fetchedAt": "2026-10-23T02:43:50.142Z", "publishedAt": "2026-05-07T15:21:24.849Z", "modifiedAt": "2026-06-11T16:17:26.449Z", "state": "published", "provider": "ivanti", "title": "", "descriptions": [ { "lang": "en", "value": "An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Ivanti", "product": "Endpoint Manager Mobile", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.8.0.1", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "12.7.0.1", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "12.6.1.1", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper input validation", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "ivanti", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs", "label": "ivanti", "tags": [], "provider": "ivanti", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-6973", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Ivanti\",\"product\":\"Endpoint Manager Mobile\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"12.8.0.1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"12.7.0.1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"12.6.1.1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper input validation\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.2,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-06-11T16:17:26.449Z", "fetchedAt": "2026-10-23T02:43:50.142Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-07T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Endpoint Manager Mobileにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:54.784Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "82263b0a034798d73e6123530b590a1852f4f83d1b643299a7f3a1623c8f5b84", "sourceModifiedAt": "2026-06-11T16:17:26.449Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Ivanti Endpoint Manager Mobile のバージョン 12.6.1.1、12.7.0.1、12.8.0.1 より前のバージョンにおいて、入力値の検証が不適切であるため、管理者権限を持つリモート認証ユーザーがリモートコード実行を行える。", "risk": "攻撃者がリモートでコードを実行できるため、サーバーや機器に攻撃者の命令を実行させられる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "リモートで認証されたユーザーで、かつ管理者権限を持つ者が対象になる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json" ], "evidenceIds": [ "E1" ] }, { "text": "Ivanti Endpoint Manager Mobile のバージョン 12.6.1.1、12.7.0.1、12.8.0.1 は影響なしとされており、それ以外のバージョンは影響があるとされている。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Ivanti / Endpoint Manager Mobile。影響なしとして記載：12.8.0.1。影響なしとして記載：12.7.0.1。影響なしとして記載：12.6.1.1。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Endpoint Manager Mobile」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-6973", "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973", "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2026-6973" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-6973", "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973", "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2026-6973" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-6973", "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973", "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2026-6973" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-6973", "label": "CVE公式レコード" }, { "url": "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs", "label": "CVE掲載の参考情報" }, { "url": "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6973", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6973.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Ivanti\",\"product\":\"Endpoint Manager Mobile\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"12.8.0.1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"12.7.0.1\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"12.6.1.1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-6973", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-6973\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-6973（Endpoint Manager Mobile）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・リモートで認証されたユーザーで、かつ管理者権限を持つ者が対象になる。\n・Ivanti Endpoint Manager Mobile のバージョン 12.6.1.1、12.7.0.1、12.8.0.1 は影響なしとされており、それ以外のバージョンは影響があるとされている。\n・公式の対象表：Ivanti / Endpoint Manager Mobile。影響なしとして記載：12.8.0.1。影響なしとして記載：12.7.0.1。影響なしとして記載：12.6.1.1。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-6973", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:54.784Z", "lastSuccess": "2026-10-23T03:23:54.784Z", "sourceCheckedAt": "2026-10-23T02:43:50.142Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-0300", "aliases": [], "title": "Cloud NGFW / PAN-OS / Prisma Access：コード実行", "summary": "Palo Alto Networks の PAN-OS ソフトウェアに含まれる User-ID™ 認証ポータル（キャプティブポータル）サービスにバッファオーバーフローの脆弱性があり、認証されていない攻撃者が特別に細工したパケットを送ることで、PA‑Series と VM‑Series のファイアウォール上でルート権限の任意コード実行が可能になる。Prisma Access、Cloud NGFW、Panorama には影響しない。", "risk": "攻撃者がルート権限で任意のコードを実行できる可能性がある。", "product": "Cloud NGFW / PAN-OS / Prisma Access", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "palo_alto", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/AU:Y/R:U/V:C/RE:M/U:Red", "affected": [ { "product": "PAN-OS", "range": ">= 12.1.0 / < 12.1.7 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 12.1.7から影響なし, 12.1.4-h5から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.2.0 / < 11.2.12 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.2.12から影響なし, 11.2.10-h6から影響なし, 11.2.7-h13から影響なし, 11.2.4-h17から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.1.0 / < 11.1.15 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.1.15から影響なし, 11.1.13-h5から影響なし, 11.1.10-h25から影響なし, 11.1.7-h6から影響なし, 11.1.6-h32から影響なし, 11.1.4-h33から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 10.2.0 / < 10.2.18-h6 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 10.2.18-h6から影響なし, 10.2.16-h7から影響なし, 10.2.13-h21から影響なし, 10.2.10-h36から影響なし, 10.2.7-h34から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "この問題は今後の PAN‑OS リリースで修正される予定である。", "User‑ID™ 認証ポータルへのアクセスをベストプラクティスに従い、信頼できる内部 IP アドレスのみに制限することが推奨される。", "「CVE-2026-0300」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-0300", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2026-0300", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0300", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-05-06T18:57:39.876Z", "modifiedAt": "2026-10-15T01:11:55.163Z", "fetchedAt": "2026-10-23T02:43:40.562Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.", "sourceTitle": "PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "versions": [ { "status": "unaffected", "version": "All", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Palo Alto Networks", "product": "PAN-OS", "versions": [ { "status": "affected", "version": "12.1.0", "lessThan": "12.1.7", "changes": [ { "at": "12.1.7", "status": "unaffected" }, { "at": "12.1.4-h5", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "11.2.0", "lessThan": "11.2.12", "changes": [ { "at": "11.2.12", "status": "unaffected" }, { "at": "11.2.10-h6", "status": "unaffected" }, { "at": "11.2.7-h13", "status": "unaffected" }, { "at": "11.2.4-h17", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "11.1.0", "lessThan": "11.1.15", "changes": [ { "at": "11.1.15", "status": "unaffected" }, { "at": "11.1.13-h5", "status": "unaffected" }, { "at": "11.1.10-h25", "status": "unaffected" }, { "at": "11.1.7-h6", "status": "unaffected" }, { "at": "11.1.6-h32", "status": "unaffected" }, { "at": "11.1.4-h33", "status": "unaffected" } ], "versionType": "custom" }, { "status": "affected", "version": "10.2.0", "lessThan": "10.2.18-h6", "changes": [ { "at": "10.2.18-h6", "status": "unaffected" }, { "at": "10.2.16-h7", "status": "unaffected" }, { "at": "10.2.13-h21", "status": "unaffected" }, { "at": "10.2.10-h36", "status": "unaffected" }, { "at": "10.2.7-h34", "status": "unaffected" } ], "versionType": "custom" } ], "defaultStatus": "unaffected", "cpes": [ "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*" ] }, { "vendor": "Palo Alto Networks", "product": "Prisma Access", "versions": [ { "status": "unaffected", "version": "All", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-0300", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "fetchedAt": "2026-10-23T02:43:40.562Z", "publishedAt": "2026-05-06T18:57:39.876Z", "modifiedAt": "2026-10-15T01:11:55.163Z", "state": "published", "provider": "palo_alto", "title": "PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal", "descriptions": [ { "lang": "en", "value": "A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "All", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "Palo Alto Networks", "product": "PAN-OS", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*", "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "12.1.0", "lessThan": "12.1.7", "versionType": "custom", "status": "affected", "changes": [ { "at": "12.1.7", "status": "unaffected" }, { "at": "12.1.4-h5", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "11.2.0", "lessThan": "11.2.12", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.2.12", "status": "unaffected" }, { "at": "11.2.10-h6", "status": "unaffected" }, { "at": "11.2.7-h13", "status": "unaffected" }, { "at": "11.2.4-h17", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "11.1.0", "lessThan": "11.1.15", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.1.15", "status": "unaffected" }, { "at": "11.1.13-h5", "status": "unaffected" }, { "at": "11.1.10-h25", "status": "unaffected" }, { "at": "11.1.7-h6", "status": "unaffected" }, { "at": "11.1.6-h32", "status": "unaffected" }, { "at": "11.1.4-h33", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "10.2.0", "lessThan": "10.2.18-h6", "versionType": "custom", "status": "affected", "changes": [ { "at": "10.2.18-h6", "status": "unaffected" }, { "at": "10.2.16-h7", "status": "unaffected" }, { "at": "10.2.13-h21", "status": "unaffected" }, { "at": "10.2.10-h36", "status": "unaffected" }, { "at": "10.2.7-h34", "status": "unaffected" } ] } ] }, { "vendor": "Palo Alto Networks", "product": "Prisma Access", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "All", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [ { "lang": "eng", "value": "This issue will be fixed in upcoming releases of PAN-OS as captured in the table above.\n\nWe strongly recommend that you secure access to your User-ID™ Authentication Portal following the instructions in the workarounds section below.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [ { "lang": "eng", "value": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n * Restrict User-ID™ Authentication Portal access to only trusted zones and in addition, disable Response Pages in the Interface Management Profile attached to every L3 interface in any zone where untrusted/internet traffic can ingress. Keep Response Pages enabled only on interfaces in trust/internal zones where legitimate users' browsers ingress. Refer to Step 6 of the following Live Community article (https://live.paloaltonetworks.com/t5/general-articles/why-it-s-essential-to-secure-your-management-interface/ta-p/1001286) and Knowledgebase article (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqbiCAC) for steps to restrict access.\n \n * Disable User-ID™ Authentication Portal if not required.\n \n\nCustomers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat ID 510019 from Applications and Threats content version 9097-10022. Decoder capabilities necessitate PAN-OS 11.1 or a later version for Threat ID support.", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [ { "lang": "en", "value": "Limited exploitation has been observed targeting Palo Alto Networks User-ID™ Authentication Portals that are exposed to untrusted IP addresses and/or the public internet. Customers following standard security best practices, such as restricting sensitive portals to trusted internal networks are at a greatly reduced risk.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-787", "lang": "en", "description": "CWE-787: Out-of-bounds Write", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/AU:Y/R:U/V:C/RE:M/U:Red", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "palo_alto", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/AU:Y/R:U/V:C/RE:M/U:Red", "baseScore": 8.7, "baseSeverity": "HIGH", "provider": "palo_alto", "sourcePath": "/containers/cna/metrics/1/cvssV4_0" } ], "references": [ { "url": "https://security.paloaltonetworks.com/CVE-2026-0300", "label": "palo_alto", "tags": [ "vendor-advisory" ], "provider": "palo_alto", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0300", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Cloud NGFW\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"PAN-OS\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.1.0\",\"lessThan\":\"12.1.7\",\"changes\":[{\"at\":\"12.1.7\",\"status\":\"unaffected\"},{\"at\":\"12.1.4-h5\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.12\",\"changes\":[{\"at\":\"11.2.12\",\"status\":\"unaffected\"},{\"at\":\"11.2.10-h6\",\"status\":\"unaffected\"},{\"at\":\"11.2.7-h13\",\"status\":\"unaffected\"},{\"at\":\"11.2.4-h17\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.1.0\",\"lessThan\":\"11.1.15\",\"changes\":[{\"at\":\"11.1.15\",\"status\":\"unaffected\"},{\"at\":\"11.1.13-h5\",\"status\":\"unaffected\"},{\"at\":\"11.1.10-h25\",\"status\":\"unaffected\"},{\"at\":\"11.1.7-h6\",\"status\":\"unaffected\"},{\"at\":\"11.1.6-h32\",\"status\":\"unaffected\"},{\"at\":\"11.1.4-h33\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.18-h6\",\"changes\":[{\"at\":\"10.2.18-h6\",\"status\":\"unaffected\"},{\"at\":\"10.2.16-h7\",\"status\":\"unaffected\"},{\"at\":\"10.2.13-h21\",\"status\":\"unaffected\"},{\"at\":\"10.2.10-h36\",\"status\":\"unaffected\"},{\"at\":\"10.2.7-h34\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Prisma Access\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "This issue will be fixed in upcoming releases of PAN-OS as captured in the table above.\n\nWe strongly recommend that you secure access to your User-ID™ Authentication Portal following the instructions in the workarounds section below.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n * Restrict User-ID™ Authentication Portal access to only trusted zones and in addition, disable Response Pages in the Interface Management Profile attached to every L3 interface in any zone where untrusted/internet traffic can ingress. Keep Response Pages enabled only on interfaces in trust/internal zones where legitimate users' browsers ingress. Refer to Step 6 of the following Live Community article (https://live.paloaltonetworks.com/t5/general-articles/why-it-s-essential-to-secure-your-management-interface/ta-p/1001286) and Knowledgebase article (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqbiCAC) for steps to restrict access.\n \n * Disable User-ID™ Authentication Portal if not required.\n \n\nCustomers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat ID 510019 from Applications and Threats content version 9097-10022. Decoder capabilities necessitate PAN-OS 11.1 or a later version for Threat ID support.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Limited exploitation has been observed targeting Palo Alto Networks User-ID™ Authentication Portals that are exposed to untrusted IP addresses and/or the public internet. Customers following standard security best practices, such as restricting sensitive portals to trusted internal networks are at a greatly reduced risk.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-787\",\"description\":\"CWE-787: Out-of-bounds Write\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"ATTACKED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"YES\",\"Recovery\":\"USER\",\"valueDensity\":\"CONCENTRATED\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"RED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.3,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/AU:Y/R:U/V:C/RE:M/U:Red\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourcePath": "/containers/cna/metrics/1/cvssV4_0", "text": "{\"attackVector\":\"ADJACENT\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"ATTACKED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"YES\",\"Recovery\":\"USER\",\"valueDensity\":\"CONCENTRATED\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"RED\",\"version\":\"4.0\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.7,\"vectorString\":\"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/AU:Y/R:U/V:C/RE:M/U:Red\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "sourcePath": "body:advisory", "text": "SSA-967325\n\nSiemens Security Advisory by Siemens ProductCERT\n\nSSA-967325: Multiple Vulnerabilities in Palo Alto Networks PAN-OS before V11.2.10-h7 on RUGGEDCOM APE1808 Devices\n\nPublication Date:\n\n2026-05-12\n\nLast Update:\n\n2026-10-13\n\nCurrent Version:\n\nV1.3\n\nCVSS v3.1 Base Score:\n10.0\n\nCVSS v4.0 Base Score:\n9.3\n\nSUMMARY\n\nPalo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.\n\nSiemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications.\n\n[1] https://security.paloaltonetworks.com/\n\nKNOWN AFFECTED PRODUCTS\n\nUn-/Collapse All\n\nAffected Product and Versions\nRemediation\n\nExpand children\n\nRUGGEDCOM APE1808\n\nShow more details\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with User-ID™ Authentication Portal configured and interface management profile with response pages enabled\n\naffected by\n\nCVE-2026-0300\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-0256\n\nCVE-2026-0261\n\nCVE-2026-0262\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with GlobalProtect portal or gateway configured when authentication override cookies are enabled and a specific certificate configuration exists\n\naffected by\n\nCVE-2026-0257\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h7. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with a PAN-OS Site-to-Site VPN Gateway with IKEv2 configured\n\naffected by\n\nCVE-2026-0258\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with DNS Proxy enabled and a network proxy attached\n\naffected by\n\nCVE-2026-0264\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with Authentication Profile with CAS enabled and Authentication profile is attached to a login interface\n\naffected by\n\nCVE-2026-0265\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW\n\naffected by\n\nCVE-2026-0269\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h7. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nRUGGEDCOM APE1808\n\nAll versions with Palo Alto Networks Virtual NGFW with URL filtering enabled and a customized response page\n\naffected by\n\nCVE-2026-0301\n\nUpgrade Palo Alto Networks Virtual NGFW V11.2.10-h7 or later versions. Contact customer support to receive patch and update information\n\nSee further recommendations from section\nMitigations\n\nMITIGATIONS\n\nSiemens has identified the following specific mitigations that customers can apply to reduce the risk:\n\nCVE-2026-0257\n\nUse a dedicated certificate for Authentication Override cookies\n\nDisable Authentication Override options (for generating and accepting cookies) in the GlobalProtect portal and gateway configuration\n\nCVE-2026-0264\n\nDisassociate DNS Proxy from externally accessible interfaces and configure DNS server with a RFC1918 or a public trusted IP address\n\nDisable the DNS Proxy feature (Network > DNS Proxy) if it is not being used and configure DNS server with a RFC1918 or a public trusted IP address\n\nCVE-2026-0300\n\nRestrict access to the User-ID Authentication Portal to trusted internal IP addresses only\n\nDisable Response Pages in the Interface Management Profile attached to every L3 interface in any zone where untrusted/internet traffic can ingress. Keep Response Pages enabled only on interfaces in trust/internal zones where legitimate users' browsers ingress\n\nDisable User-ID™ Authentication Portal if not required\n\nProduct-specific remediations or mitigations can be found in the section\nKnown Affected Products .\n\nPlease follow the General Security Recommendations .\n\nGENERAL SECURITY RECOMMENDATIONS\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security ), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\nPRODUCT DESCRIPTION\n\nRUGGEDCOM APE1808 is a powerful utility-grade application hosting platform that lets you deploy a range of commercially available applications for edge computing and cybersecurity in harsh, industrial environments.\n\nVULNERABILITY DESCRIPTION\n\nUn-/Collapse All\n\nThis chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory.\nWherever applicable, it also documents the product-specific impact of the individual vulnerabilities.\n\nVulnerability CVE-2026-0256\n\nA stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface.\n\nCVSS v3.1 Base Score\n5.2\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N\n\nCVSS v4.0 Base Score\n6.9\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N\n\nCWE\nCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\nVulnerability CVE-2026-0257\n\nAuthentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\n\nCVSS v3.1 Base Score\n9.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N\n\nCVSS v4.0 Base Score\n7.8\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N\n\nCWE\nCWE-565: Reliance on Cookies without Validation and Integrity Checking\n\nVulnerability CVE-2026-0258\n\nA server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition\n\nCVSS v3.1 Base Score\n8.2\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H\n\nCVSS v4.0 Base Score\n8.3\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-918: Server-Side Request Forgery (SSRF)\n\nVulnerability CVE-2026-0261\n\nMultiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI\n\nCVSS v3.1 Base Score\n7.2\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n8.6\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nVulnerability CVE-2026-0262\n\nMultiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to a dataplane interface\n\nCVSS v3.1 Base Score\n7.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\nCVSS v4.0 Base Score\n8.7\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-754: Improper Check for Unusual or Exceptional Conditions\n\nVulnerability CVE-2026-0264\n\nA buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only)\n\nCVSS v3.1 Base Score\n9.0\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n9.2\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N\n\nCWE\nCWE-122: Heap-based Buffer Overflow\n\nVulnerability CVE-2026-0265\n\nAn authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled\n\nCVSS v3.1 Base Score\n9.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n9.2\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-347: Improper Verification of Cryptographic Signature\n\nVulnerability CVE-2026-0269\n\nA memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.\n\nCVSS v3.1 Base Score\n0.0\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N\n\nCVSS v4.0 Base Score\n6.9\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\n\nCWE\nCWE-754: Improper Check for Unusual or Exceptional Conditions\n\nVulnerability CVE-2026-0300\n\nA buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.\n\nCVSS v3.1 Base Score\n10.0\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n\nCVSS v4.0 Base Score\n9.3\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N\n\nCWE\nCWE-787: Out-of-bounds Write\n\nVulnerability CVE-2026-0301\n\nAn information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information.\n\nCVSS v3.1 Base Score\n5.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n\nCVSS v4.0 Base Score\n6.3\n\nCVSS v4.0 Vector\nCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N\n\nCWE\nCWE-908: Use of Uninitialized Resource\n\nADDITIONAL INFORMATION\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT:\n\nhttps://www.siemens.com/cert/advisories\n\nHISTORY DATA\n\nV1.0 (2026-05-12):\n\nPublication Date\n\nV1.1 (2026-06-09):\n\nAdded CVE-2026-0256, CVE-2026-0257, CVE-2026-0258, CVE-2026-0261, CVE-2026-0262, CVE-2026-0264 and CVE-2026-0265\n\nV1.2 (2026-07-14):\n\nAdded CVE-2026-0269. Added remediation for CVE-2026-0300, CVE-2026-0256, CVE-2026-0257, CVE-2026-0261, CVE-2026-0262, CVE-2026-0258, CVE-2026-0264 and CVE-2026-0265\n\nV1.3 (2026-10-13):\n\nAdded CVE-2026-0301\n\nTERMS OF USE\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on:\nhttps://www.siemens.com/productcert/terms-of-use .\n\nSSA-967325\n\n©\nSiemens 2026", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2026-0300", "relatedCves": [ "CVE-2026-0300", "CVE-2026-0256", "CVE-2026-0261", "CVE-2026-0262", "CVE-2026-0257", "CVE-2026-0258", "CVE-2026-0264", "CVE-2026-0265", "CVE-2026-0269", "CVE-2026-0301" ] } ], "limits": { "completeness": "bounded", "truncatedFields": [ "/containers/cna/affected/1/cpes" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。", "excludedLinkedSources": [] }, "supplementarySources": [ { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "title": "SSA-967325", "relatedCves": [ "CVE-2026-0300", "CVE-2026-0256", "CVE-2026-0261", "CVE-2026-0262", "CVE-2026-0257", "CVE-2026-0258", "CVE-2026-0264", "CVE-2026-0265", "CVE-2026-0269", "CVE-2026-0301" ] } ], "relatedDocuments": [ { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "title": "SSA-967325", "relatedCves": [ "CVE-2026-0300", "CVE-2026-0256", "CVE-2026-0261", "CVE-2026-0262", "CVE-2026-0257", "CVE-2026-0258", "CVE-2026-0264", "CVE-2026-0265", "CVE-2026-0269", "CVE-2026-0301" ], "truncated": false } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T01:11:55.163Z", "fetchedAt": "2026-10-23T02:43:40.562Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-06T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.", "sourceSummary": "Cloud NGFW / PAN-OS / Prisma Accessにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:56.161Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "962b1e397514dd2c35702a064a20f0c5cdac39b9d26a212d8af5951010bb4b15", "sourceModifiedAt": "2026-10-15T01:11:55.163Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Palo Alto Networks の PAN-OS ソフトウェアに含まれる User-ID™ 認証ポータル（キャプティブポータル）サービスにバッファオーバーフローの脆弱性があり、認証されていない攻撃者が特別に細工したパケットを送ることで、PA‑Series と VM‑Series のファイアウォール上でルート権限の任意コード実行が可能になる。Prisma Access、Cloud NGFW、Panorama には影響しない。", "risk": "攻撃者がルート権限で任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "PA‑Series および VM‑Series ファイアウォール（PAN‑OS） の以下のバージョンが影響を受ける：12.1.0 以上 12.1.7 未満、11.2.0 以上 11.2.12 未満、11.1.0 以上 11.1.15 未満、10.2.0 以上 10.2.18‑h6 未満（それぞれのパッチレベルで無影響になるバージョンが記載されている）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Prisma Access はこの脆弱性の影響を受けない。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E1", "E4", "E2" ] }, { "text": "Cloud NGFW はこの脆弱性の影響を受けない。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E1", "E5", "E2" ] }, { "text": "Panorama アプライアンスはこの脆弱性の影響を受けない。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Palo Alto Networks / PAN-OS。影響ありとして記載：12.1.0以上、12.1.7未満。途中の変更：12.1.7から影響なし、12.1.4-h5から影響なし。影響ありとして記載：11.2.0以上、11.2.12未満。途中の変更：11.2.12から影響なし、11.2.10-h6から影響なし、11.2.7-h13から影響なし、11.2.4-h17から影響なし。影響ありとして記載：11.1.0以上、11.1.15未満。途中の変更：11.1.15から影響なし、11.1.13-h5から影響なし、11.1.10-h25から影響なし、11.1.7-h6から影響なし、11.1.6-h32から影響なし、11.1.4-h33から影響なし。影響ありとして記載：10.2.0以上、10.2.18-h6未満。途中の変更：10.2.18-h6から影響なし、10.2.16-h7から影響なし、10.2.13-h21から影響なし、10.2.10-h36から影響なし、10.2.7-h34から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Palo Alto Networks / Prisma Access。影響なしとして記載：All。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E5" ] }, { "text": "「Cloud NGFW / PAN-OS / Prisma Access」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-0300", "https://security.paloaltonetworks.com/CVE-2026-0300", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300", "https://nvd.nist.gov/vuln/detail/CVE-2026-0300" ] } ], "actions": [ { "text": "この問題は今後の PAN‑OS リリースで修正される予定である。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E6" ] }, { "text": "User‑ID™ 認証ポータルへのアクセスをベストプラクティスに従い、信頼できる内部 IP アドレスのみに制限することが推奨される。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E6" ] }, { "text": "「CVE-2026-0300」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-0300", "https://security.paloaltonetworks.com/CVE-2026-0300", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300", "https://nvd.nist.gov/vuln/detail/CVE-2026-0300" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-0300", "https://security.paloaltonetworks.com/CVE-2026-0300", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300", "https://nvd.nist.gov/vuln/detail/CVE-2026-0300" ] } ], "temporaryMitigations": [ { "text": "User‑ID™ 認証ポータルへのアクセスを信頼できる内部ゾーンに限定し、インターネットからのトラフィックが入るゾーンのすべての L3 インターフェースに付随する Interface Management Profile で Response Pages を無効にする（信頼ゾーンのインターフェースのみ有効にする）。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E7" ] }, { "text": "User‑ID™ 認証ポータルが不要な場合は無効化する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E7" ] }, { "text": "Threat Prevention サブスクリプションを利用している場合は、Threat ID 510019 を有効にし、PAN‑OS 11.1 以降で Applications and Threats コンテンツバージョン 9097‑10022 を使用する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E7" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json" ], "evidenceIds": [ "E5" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-0300", "https://security.paloaltonetworks.com/CVE-2026-0300", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300", "https://nvd.nist.gov/vuln/detail/CVE-2026-0300" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-0300", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2026-0300", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0300", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourceField": "/containers/cna/title", "excerpt": "PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"PAN-OS\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.1.0\",\"lessThan\":\"12.1.7\",\"changes\":[{\"at\":\"12.1.7\",\"status\":\"unaffected\"},{\"at\":\"12.1.4-h5\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.2.0\",\"lessThan\":\"11.2.12\",\"changes\":[{\"at\":\"11.2.12\",\"status\":\"unaffected\"},{\"at\":\"11.2.10-h6\",\"status\":\"unaffected\"},{\"at\":\"11.2.7-h13\",\"status\":\"unaffected\"},{\"at\":\"11.2.4-h17\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"11.1.0\",\"lessThan\":\"11.1.15\",\"changes\":[{\"at\":\"11.1.15\",\"status\":\"unaffected\"},{\"at\":\"11.1.13-h5\",\"status\":\"unaffected\"},{\"at\":\"11.1.10-h25\",\"status\":\"unaffected\"},{\"at\":\"11.1.7-h6\",\"status\":\"unaffected\"},{\"at\":\"11.1.6-h32\",\"status\":\"unaffected\"},{\"at\":\"11.1.4-h33\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"10.2.0\",\"lessThan\":\"10.2.18-h6\",\"changes\":[{\"at\":\"10.2.18-h6\",\"status\":\"unaffected\"},{\"at\":\"10.2.16-h7\",\"status\":\"unaffected\"},{\"at\":\"10.2.13-h21\",\"status\":\"unaffected\"},{\"at\":\"10.2.10-h36\",\"status\":\"unaffected\"},{\"at\":\"10.2.7-h34\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*\"]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Prisma Access\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Palo Alto Networks\",\"product\":\"Cloud NGFW\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "This issue will be fixed in upcoming releases of PAN-OS as captured in the table above.\n\nWe strongly recommend that you secure access to your User-ID™ Authentication Portal following the instructions in the workarounds section below.", "language": "eng", "representation": "source_excerpt" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0300.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n * Restrict User-ID™ Authentication Portal access to only trusted zones and in addition, disable Response Pages in the Interface Management Profile attached to every L3 interface in any zone where untrusted/internet traffic can ingress. Keep Response Pages enabled only on interfaces in trust/internal zones where legitimate users' browsers ingress. Refer to Step 6 of the following Live Community article (https://live.paloaltonetworks.com/t5/general-articles/why-it-s-essential-to-secure-your-management-interface/ta-p/1001286) and Knowledgebase article (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqbiCAC) for steps to restrict access.\n \n * Disable User-ID™ Authentication Portal if not required.\n \n\nCustomers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat ID 510019 from Applications and Threats content version 9097-10022. Decoder capabilities necessitate PAN-OS 11.1 or a later version for Threat ID support.", "language": "eng", "representation": "source_excerpt" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0300", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-0300\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-0300（Cloud NGFW / PAN-OS / Prisma Access）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・PA‑Series および VM‑Series ファイアウォール（PAN‑OS） の以下のバージョンが影響を受ける：12.1.0 以上 12.1.7 未満、11.2.0 以上 11.2.12 未満、11.1.0 以上 11.1.15 未満、10.2.0 以上 10.2.18‑h6 未満（それぞれのパッチレベルで無影響になるバージョンが記載されている）。\n・Prisma Access はこの脆弱性の影響を受けない。\n・Cloud NGFW はこの脆弱性の影響を受けない。\n・Panorama アプライアンスはこの脆弱性の影響を受けない。\n・公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。\n・公式の対象表：Palo Alto Networks / PAN-OS。影響ありとして記載：12.1.0以上、12.1.7未満。途中の変更：12.1.7から影響なし、12.1.4-h5から影響なし。影響ありとして記載：11.2.0以上、11.2.12未満。途中の変更：11.2.12から影響なし、11.2.10-h6から影響なし、11.2.7-h13から影響なし、11.2.4-h17から影響なし。影響ありとして記載：11.1.0以上、11.1.15未満。途中の変更：11.1.15から影響なし、11.1.13-h5から影響なし、11.1.10-h25から影響なし、11.1.7-h6から影響なし、11.1.6-h32から影響なし、11.1.4-h33から影響なし。影響ありとして記載：10.2.0以上、10.2.18-h6未満。途中の変更：10.2.18-h6から影響なし、10.2.16-h7から影響なし、10.2.13-h21から影響なし、10.2.10-h36から影響なし、10.2.7-h34から影響なし。\n・公式の対象表：Palo Alto Networks / Prisma Access。影響なしとして記載：All。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-0300", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:56.161Z", "lastSuccess": "2026-10-23T03:23:56.161Z", "sourceCheckedAt": "2026-10-23T02:43:40.562Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-31431", "aliases": [], "title": "Linux：端末内の低い権限から、より強い権限を得られるおそれ", "summary": "Linuxの暗号処理に関係する問題です。CVE本文は修正内容の技術説明ですが、CISAはこの問題によって権限が昇格する可能性を示しています。Linux開発側の技術評価は端末内の低い権限を持つ攻撃者を想定しています。OS・機器の管理担当者に、このCVEの修正が適用されたカーネルか確認してもらってください。", "risk": "攻撃者が、本来与えられているより強い権限を得る可能性があります。CVE本文の修正説明に被害の平易な説明が少ないことは、「リスクがない」という意味ではありません。", "product": "Linux", "category": "linux", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "Linux", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Linuxカーネル / algif_aead", "range": "4.14を影響ありと記載。系列別の影響なし範囲は本文に保持" } ], "fixed": [], "steps": [ "管理担当者に、使っているLinuxや機器の製品名、OSの系列、稼働中のカーネルの完全な版、導入済みのカーネルパッケージの版を確認してもらいます。配布元のCVE対応情報で、古い系列へ修正を戻し適用したパッケージ（バックポート）かも照合し、見た目の番号だけで安全・未修正を判断しないでください。", "配布元が示す、このCVEへの修正または緩和策を適用してください。CISAは、利用できる緩和策がない場合には製品の使用中止を求めています。Linuxを組み込んだ専用機器は、機器メーカーの更新手順に沿って管理担当者に対応を依頼します。", "利用しているLinuxの配布元が示す、このCVEへの修正パッケージを管理者に適用してもらいます。Ubuntu Desktopでは「ソフトウェアの更新」から提供された更新を適用できます。サーバーや他の配布元では、それぞれの正規の更新手順に従います。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "label": "公式CVE：対象範囲・説明・技術評価" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-31431", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431", "label": "CISA公式の保存情報：影響と対応" }, { "url": "https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/", "label": "CISAが示す関連情報" }, { "url": "https://xint.io/blog/copy-fail-linux-distributions#the-fix-6", "label": "CISAが示す関連情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31431", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2026-04-22T08:15:10.123Z", "modifiedAt": "2026-10-15T01:16:12.771Z", "fetchedAt": "2026-10-23T02:43:48.256Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings. Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.", "sourceTitle": "crypto: algif_aead - Revert to operating out-of-place", "summaryMethod": "公式資料を照合した個別の日本語解説。一般的な操作手順は別に区別しています。", "state": "published", "affectedDetails": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "crypto/af_alg.c", "crypto/algif_aead.c", "crypto/algif_skcipher.c", "include/crypto/if_alg.h" ], "versions": [ { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "893d22e0135fa394db81df88697fba6032747667", "status": "affected", "versionType": "git" }, { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "19d43105a97be0810edbda875f2cd03f30dc130c", "status": "affected", "versionType": "git" }, { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "961cfa271a918ad4ae452420e7c303149002875b", "status": "affected", "versionType": "git" }, { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "3115af9644c342b356f3f07a4dd1c8905cd9a6fc", "status": "affected", "versionType": "git" }, { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "8b88d99341f139e23bdeb1027a2a3ae10d341d82", "status": "affected", "versionType": "git" }, { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8", "status": "affected", "versionType": "git" }, { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "ce42ee423e58dffa5ec03524054c9d8bfd4f6237", "status": "affected", "versionType": "git" }, { "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "status": "affected", "versionType": "git" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "crypto/af_alg.c", "crypto/algif_aead.c", "crypto/algif_skcipher.c", "include/crypto/if_alg.h" ], "versions": [ { "version": "4.14", "status": "affected" }, { "version": "0", "lessThan": "4.14", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.254", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.204", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1.170", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.6.137", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.12.85", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.18.22", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.19.12", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver" }, { "version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-31431", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "fetchedAt": "2026-10-23T02:43:48.256Z", "publishedAt": "2026-04-22T08:15:10.123Z", "modifiedAt": "2026-10-15T01:16:12.771Z", "state": "published", "provider": "Linux", "title": "crypto: algif_aead - Revert to operating out-of-place", "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings. Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Linux", "product": "Linux", "sourcePath": "/containers/cna/affected/0", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [ "crypto/af_alg.c", "crypto/algif_aead.c", "crypto/algif_skcipher.c", "include/crypto/if_alg.h" ], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "893d22e0135fa394db81df88697fba6032747667", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "19d43105a97be0810edbda875f2cd03f30dc130c", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "961cfa271a918ad4ae452420e7c303149002875b", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "3115af9644c342b356f3f07a4dd1c8905cd9a6fc", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "8b88d99341f139e23bdeb1027a2a3ae10d341d82", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "ce42ee423e58dffa5ec03524054c9d8bfd4f6237", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "versionType": "git", "status": "affected" } ] }, { "vendor": "Linux", "product": "Linux", "sourcePath": "/containers/cna/affected/1", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [ "crypto/af_alg.c", "crypto/algif_aead.c", "crypto/algif_skcipher.c", "include/crypto/if_alg.h" ], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "0", "lessThan": "4.14", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "5.10.254", "lessThanOrEqual": "5.10.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "5.15.204", "lessThanOrEqual": "5.15.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "6.1.170", "lessThanOrEqual": "6.1.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.6.137", "lessThanOrEqual": "6.6.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.12.85", "lessThanOrEqual": "6.12.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.18.22", "lessThanOrEqual": "6.18.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.19.12", "lessThanOrEqual": "6.19.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "7.0", "lessThanOrEqual": "*", "versionType": "original_commit_for_fix", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "Linux", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/0" }, { "url": "https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/1" }, { "url": "https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/2" }, { "url": "https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/3" }, { "url": "https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/4" }, { "url": "https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/5" }, { "url": "https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/6" }, { "url": "https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/7" }, { "url": "https://github.com/theori-io/copy-fail-CVE-2026-31431", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://xint.io/blog/copy-fail-linux-distributions#the-fix-6", "label": "CISA-ADP", "tags": [ "mitigation" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/", "label": "CISA-ADP", "tags": [ "mitigation" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation", "label": "CISA-ADP", "tags": [ "mitigation" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/23", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://copy.fail/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/25", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/26", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/2", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/5", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/6", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/10", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/7" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/11", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/8" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/12", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/9" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/14", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/10" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/15", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/11" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/16", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/12" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/17", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/13" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/18", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/14" }, { "url": "https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/15" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/30/20", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/16" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/2", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/17" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/3", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/18" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/10", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/19" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/12", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/20" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/15", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/21" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/16", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/22" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/17", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/23" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/18", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/24" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/22", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/25" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/23", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/26" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/01/24", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/27" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/4", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/28" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/5", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/29" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/6", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/30" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/7", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/31" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/8", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/32" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/14", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/33" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/15", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/34" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/16", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/35" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/17", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/36" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/18", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/37" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/19", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/38" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/20", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/39" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/21", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/40" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/23", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/41" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/24", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/42" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/02/25", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/43" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/03/3", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/44" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/03/4", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/45" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/03/10", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/46" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/03/5", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/47" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/03/6", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/48" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/03/12", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/49" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/03/13", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/50" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/1", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/51" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/2", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/52" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/10", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/53" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/11", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/54" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/12", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/55" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/13", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/56" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/14", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/57" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/8", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/58" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/9", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/59" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/24", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/60" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/27", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/61" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/28", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/62" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/29", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/63" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/04/31", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/64" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/06/5", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/65" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/07/2", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/66" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/07/12", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/67" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/08/13", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/68" }, { "url": "https://www.kb.cert.org/vuls/id/260001", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/69" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/18/3", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/70" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/0" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/1" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/2" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-328642.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/3" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-31431", "label": "redhat-SADP", "tags": [ "vdb-entry", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/0" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460538", "label": "RHBZ#2460538", "tags": [ "issue-tracking", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/1" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.json", "label": "redhat-SADP", "tags": [ "x_sadp-csaf-vex" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/2" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14926", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/3" }, { "url": "https://access.redhat.com/errata/RHSA-2026:33486", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/4" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14097", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/5" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14112", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/6" }, { "url": "https://access.redhat.com/errata/RHSA-2026:15087", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/7" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14773", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/8" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13729", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/9" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13885", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/10" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13727", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/11" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13690", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/12" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13862", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/13" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13811", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/14" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13887", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/15" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13566", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/16" }, { "url": "https://access.redhat.com/errata/RHSA-2026:19074", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/17" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13936", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/18" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13734", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/19" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13932", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/20" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14339", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/21" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13565", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/22" }, { "url": "https://access.redhat.com/errata/RHSA-2026:19225", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/23" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13577", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/24" }, { "url": "https://access.redhat.com/errata/RHSA-2026:15976", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/25" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14165", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/26" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14230", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/27" }, { "url": "https://access.redhat.com/errata/RHSA-2026:16111", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/28" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13681", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/29" }, { "url": "https://access.redhat.com/errata/RHSA-2026:16210", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/30" }, { "url": "https://access.redhat.com/errata/RHSA-2026:16209", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/31" }, { "url": "https://access.redhat.com/errata/RHSA-2026:16208", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/32" }, { "url": "https://access.redhat.com/errata/RHSA-2026:16063", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/33" }, { "url": "https://access.redhat.com/errata/RHSA-2026:16018", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/34" }, { "url": "https://access.redhat.com/errata/RHSA-2026:15978", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/35" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13578", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/36" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14137", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/37" }, { "url": "https://access.redhat.com/errata/RHSA-2026:14301", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/3/references/38" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"unaffected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"crypto/af_alg.c\",\"crypto/algif_aead.c\",\"crypto/algif_skcipher.c\",\"include/crypto/if_alg.h\"],\"versions\":[{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"893d22e0135fa394db81df88697fba6032747667\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"19d43105a97be0810edbda875f2cd03f30dc130c\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"961cfa271a918ad4ae452420e7c303149002875b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"3115af9644c342b356f3f07a4dd1c8905cd9a6fc\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"8b88d99341f139e23bdeb1027a2a3ae10d341d82\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"ce42ee423e58dffa5ec03524054c9d8bfd4f6237\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5\",\"status\":\"affected\",\"versionType\":\"git\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"affected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"crypto/af_alg.c\",\"crypto/algif_aead.c\",\"crypto/algif_skcipher.c\",\"include/crypto/if_alg.h\"],\"versions\":[{\"version\":\"4.14\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.14\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.10.254\",\"lessThanOrEqual\":\"5.10.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.15.204\",\"lessThanOrEqual\":\"5.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.1.170\",\"lessThanOrEqual\":\"6.1.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.6.137\",\"lessThanOrEqual\":\"6.6.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.12.85\",\"lessThanOrEqual\":\"6.12.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.18.22\",\"lessThanOrEqual\":\"6.18.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.19.12\",\"lessThanOrEqual\":\"6.19.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"status\":\"unaffected\",\"versionType\":\"original_commit_for_fix\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings. Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/3/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourcePath": "/containers/adp/3/metrics/1/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "sourcePath": "body:advisory", "text": "SSA-019113\n\nSiemens Security Advisory by Siemens ProductCERT\n\nSSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6\n\nPublication Date:\n\n2026-07-14\n\nLast Update:\n\n2026-10-13\n\nCurrent Version:\n\nV1.2\n\nCVSS v3.1 Base Score:\n10.0\n\nCVSS v4.0 Base Score:\n8.7\n\nSUMMARY\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.\n\nSIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1.6 only; for version V3.1.7 refer to SSA-457936 .\n\nKNOWN AFFECTED PRODUCTS\n\nUn-/Collapse All\n\nAffected Product and Versions\nRemediation\n\nExpand children\n\nSIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants)\n\nShow more details\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\nAll versions >= V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-51384\n\nCVE-2023-52927\n\nCVE-2024-26783\n\nCVE-2024-27056\n\nCVE-2024-28956\n\nCVE-2024-36903\n\nCVE-2024-36927\n\nCVE-2024-42079\n\nCVE-2024-46786\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49968\n\nCVE-2024-49994\n\nCVE-2024-49998\n\nCVE-2024-50014\n\nCVE-2024-50063\n\nCVE-2024-50164\n\nCVE-2024-50298\n\nCVE-2024-53124\n\nCVE-2024-53170\n\nCVE-2024-54458\n\nCVE-2024-56631\n\nCVE-2024-56703\n\nCVE-2024-56719\n\nCVE-2024-57917\n\nCVE-2024-57924\n\nCVE-2024-57973\n\nCVE-2024-57977\n\nCVE-2024-57979\n\nCVE-2024-58011\n\nCVE-2024-58016\n\nCVE-2024-58020\n\nCVE-2024-58056\n\nCVE-2024-58058\n\nCVE-2024-58061\n\nCVE-2024-58086\n\nCVE-2025-21645\n\nCVE-2025-21648\n\nCVE-2025-21655\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-21702\n\nCVE-2025-21705\n\nCVE-2025-21706\n\nCVE-2025-21707\n\nCVE-2025-21718\n\nCVE-2025-21731\n\nCVE-2025-21745\n\nCVE-2025-21758\n\nCVE-2025-21760\n\nCVE-2025-21764\n\nCVE-2025-21765\n\nCVE-2025-21780\n\nCVE-2025-21795\n\nCVE-2025-21796\n\nCVE-2025-21802\n\nCVE-2025-21814\n\nCVE-2025-21846\n\nCVE-2025-21853\n\nCVE-2025-21861\n\nCVE-2025-21864\n\nCVE-2025-21867\n\nCVE-2025-21875\n\nCVE-2025-21887\n\nCVE-2025-21913\n\nCVE-2025-21919\n\nCVE-2025-21925\n\nCVE-2025-21926\n\nCVE-2025-21938\n\nCVE-2025-21959\n\nCVE-2025-21999\n\nCVE-2025-22005\n\nCVE-2025-22015\n\nCVE-2025-22055\n\nCVE-2025-22056\n\nCVE-2025-22060\n\nCVE-2025-22083\n\nCVE-2025-22090\n\nCVE-2025-22095\n\nCVE-2025-22107\n\nCVE-2025-22111\n\nCVE-2025-22121\n\nCVE-2025-23136\n\nCVE-2025-23143\n\nCVE-2025-37785\n\nCVE-2025-37909\n\nCVE-2025-37917\n\nCVE-2025-37945\n\nCVE-2025-37959\n\nCVE-2025-37964\n\nCVE-2025-37972\n\nCVE-2025-37980\n\nCVE-2025-38125\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38232\n\nCVE-2025-38322\n\nCVE-2025-38591\n\nCVE-2025-38614\n\nCVE-2025-38681\n\nCVE-2025-38704\n\nCVE-2025-38721\n\nCVE-2025-38725\n\nCVE-2025-38727\n\nCVE-2025-38732\n\nCVE-2025-38736\n\nCVE-2025-39681\n\nCVE-2025-39691\n\nCVE-2025-39721\n\nCVE-2025-39748\n\nCVE-2025-39756\n\nCVE-2025-39764\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39782\n\nCVE-2025-39795\n\nCVE-2025-39826\n\nCVE-2025-39827\n\nCVE-2025-39845\n\nCVE-2025-39866\n\nCVE-2025-39871\n\nCVE-2025-39931\n\nCVE-2025-39953\n\nCVE-2025-39955\n\nCVE-2025-39964\n\nCVE-2025-39977\n\nCVE-2025-39978\n\nCVE-2025-39980\n\nCVE-2025-40022\n\nCVE-2025-40070\n\nCVE-2025-40078\n\nCVE-2025-40080\n\nCVE-2025-40105\n\nCVE-2025-40135\n\nCVE-2025-40149\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-40300\n\nCVE-2025-61984\n\nCVE-2025-61985\n\nCVE-2025-68206\n\nCVE-2025-68261\n\nCVE-2025-68264\n\nCVE-2025-68265\n\nCVE-2025-68266\n\nCVE-2025-68291\n\nCVE-2025-68337\n\nCVE-2025-68349\n\nCVE-2025-68363\n\nCVE-2025-68371\n\nCVE-2025-68724\n\nCVE-2025-68725\n\nCVE-2025-68742\n\nCVE-2025-68764\n\nCVE-2025-68773\n\nCVE-2025-68776\n\nCVE-2025-68782\n\nCVE-2025-68787\n\nCVE-2025-68788\n\nCVE-2025-68798\n\nCVE-2025-68803\n\nCVE-2025-68814\n\nCVE-2025-68816\n\nCVE-2025-68818\n\nCVE-2025-68820\n\nCVE-2025-71064\n\nCVE-2025-71075\n\nCVE-2025-71079\n\nCVE-2025-71085\n\nCVE-2025-71086\n\nCVE-2025-71088\n\nCVE-2025-71095\n\nCVE-2025-71097\n\nCVE-2025-71098\n\nCVE-2025-71104\n\nCVE-2025-71112\n\nCVE-2025-71113\n\nCVE-2025-71114\n\nCVE-2025-71120\n\nCVE-2025-71123\n\nCVE-2025-71131\n\nCVE-2025-71161\n\nCVE-2025-71162\n\nCVE-2025-71163\n\nCVE-2025-71185\n\nCVE-2025-71186\n\nCVE-2025-71189\n\nCVE-2025-71190\n\nCVE-2025-71191\n\nCVE-2025-71197\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-22977\n\nCVE-2026-22979\n\nCVE-2026-22980\n\nCVE-2026-22982\n\nCVE-2026-22992\n\nCVE-2026-22994\n\nCVE-2026-23003\n\nCVE-2026-23005\n\nCVE-2026-23010\n\nCVE-2026-23011\n\nCVE-2026-23019\n\nCVE-2026-23026\n\nCVE-2026-23038\n\nCVE-2026-23054\n\nCVE-2026-23060\n\nCVE-2026-23083\n\nCVE-2026-23084\n\nCVE-2026-23086\n\nCVE-2026-23087\n\nCVE-2026-23095\n\nCVE-2026-23100\n\nCVE-2026-23103\n\nCVE-2026-23110\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-27135\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31682\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-3497\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-46174\n\nCVE-2026-46333\n\nCVE-2023-53292\n\nCVE-2025-21863\n\nCVE-2025-40196\n\nCVE-2026-23255\n\nCVE-2026-23399\n\nCVE-2026-31449\n\nCVE-2026-31681\n\nCVE-2026-31700\n\nCVE-2026-43071\n\nCVE-2026-43085\n\nCVE-2026-43089\n\nCVE-2026-43116\n\nCVE-2026-43216\n\nCVE-2026-43303\n\nCVE-2026-43492\n\nCVE-2026-43499\n\nCVE-2026-43501\n\nCVE-2026-45841\n\nCVE-2026-46015\n\nCVE-2026-46021\n\nCVE-2026-46033\n\nCVE-2026-46037\n\nCVE-2026-46040\n\nCVE-2026-46046\n\nCVE-2026-46086\n\nCVE-2026-46101\n\nCVE-2026-46116\n\nCVE-2026-46132\n\nCVE-2026-46172\n\nCVE-2026-46173\n\nCVE-2026-46193\n\nCVE-2026-46303\n\nCVE-2026-46306\n\nCVE-2026-46323\n\nCVE-2026-52910\n\nCVE-2026-52912\n\nCVE-2026-52930\n\nCVE-2026-52933\n\nCVE-2026-52942\n\nCVE-2026-52943\n\nCVE-2026-52946\n\nCVE-2026-52970\n\nCVE-2026-52986\n\nCVE-2026-52998\n\nCVE-2026-52999\n\nCVE-2026-53001\n\nCVE-2026-53002\n\nCVE-2026-53006\n\nCVE-2026-53012\n\nCVE-2026-53050\n\nCVE-2026-53134\n\nCVE-2026-53218\n\nCVE-2026-53219\n\nCVE-2026-53223\n\nCVE-2026-53236\n\nCVE-2026-53239\n\nCVE-2026-53249\n\nCVE-2026-53268\n\nCVE-2026-53269\n\nCVE-2026-53275\n\nCVE-2026-53295\n\nCVE-2026-53352\n\nCVE-2026-53400\n\nCVE-2026-63810\n\nCVE-2026-64279\n\nCVE-2026-64317\n\nCVE-2026-64370\n\nCVE-2026-64371\n\nCVE-2026-64375\n\nCVE-2026-64411\n\nCVE-2026-64412\n\nCVE-2026-64413\n\nCVE-2026-64422\n\nCVE-2026-64423\n\nCVE-2026-64425\n\nCVE-2026-64538\n\nCVE-2026-64545\n\nCVE-2026-64552\n\nCVE-2026-64560\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\nAll versions >= V3.1.6 < V3.1.7\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-31431\n\nCVE-2026-43284\n\nCVE-2026-46300\n\nUpdate to V3.1.7 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)\n\nAll versions >= V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-51384\n\nCVE-2023-52927\n\nCVE-2024-26783\n\nCVE-2024-27056\n\nCVE-2024-28956\n\nCVE-2024-36903\n\nCVE-2024-36927\n\nCVE-2024-42079\n\nCVE-2024-46786\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49968\n\nCVE-2024-49994\n\nCVE-2024-49998\n\nCVE-2024-50014\n\nCVE-2024-50063\n\nCVE-2024-50164\n\nCVE-2024-50298\n\nCVE-2024-53124\n\nCVE-2024-53170\n\nCVE-2024-54458\n\nCVE-2024-56631\n\nCVE-2024-56703\n\nCVE-2024-56719\n\nCVE-2024-57917\n\nCVE-2024-57924\n\nCVE-2024-57973\n\nCVE-2024-57977\n\nCVE-2024-57979\n\nCVE-2024-58011\n\nCVE-2024-58016\n\nCVE-2024-58020\n\nCVE-2024-58056\n\nCVE-2024-58058\n\nCVE-2024-58061\n\nCVE-2024-58086\n\nCVE-2025-21645\n\nCVE-2025-21648\n\nCVE-2025-21655\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-21702\n\nCVE-2025-21705\n\nCVE-2025-21706\n\nCVE-2025-21707\n\nCVE-2025-21718\n\nCVE-2025-21731\n\nCVE-2025-21745\n\nCVE-2025-21758\n\nCVE-2025-21760\n\nCVE-2025-21764\n\nCVE-2025-21765\n\nCVE-2025-21780\n\nCVE-2025-21795\n\nCVE-2025-21796\n\nCVE-2025-21802\n\nCVE-2025-21814\n\nCVE-2025-21846\n\nCVE-2025-21853\n\nCVE-2025-21861\n\nCVE-2025-21864\n\nCVE-2025-21867\n\nCVE-2025-21875\n\nCVE-2025-21887\n\nCVE-2025-21913\n\nCVE-2025-21919\n\nCVE-2025-21925\n\nCVE-2025-21926\n\nCVE-2025-21938\n\nCVE-2025-21959\n\nCVE-2025-21999\n\nCVE-2025-22005\n\nCVE-2025-22015\n\nCVE-2025-22055\n\nCVE-2025-22056\n\nCVE-2025-22060\n\nCVE-2025-22083\n\nCVE-2025-22090\n\nCVE-2025-22095\n\nCVE-2025-22107\n\nCVE-2025-22111\n\nCVE-2025-22121\n\nCVE-2025-23136\n\nCVE-2025-23143\n\nCVE-2025-37785\n\nCVE-2025-37909\n\nCVE-2025-37917\n\nCVE-2025-37945\n\nCVE-2025-37959\n\nCVE-2025-37964\n\nCVE-2025-37972\n\nCVE-2025-37980\n\nCVE-2025-38125\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38232\n\nCVE-2025-38322\n\nCVE-2025-38591\n\nCVE-2025-38614\n\nCVE-2025-38681\n\nCVE-2025-38704\n\nCVE-2025-38721\n\nCVE-2025-38725\n\nCVE-2025-38727\n\nCVE-2025-38732\n\nCVE-2025-38736\n\nCVE-2025-39681\n\nCVE-2025-39691\n\nCVE-2025-39721\n\nCVE-2025-39748\n\nCVE-2025-39756\n\nCVE-2025-39764\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39782\n\nCVE-2025-39795\n\nCVE-2025-39826\n\nCVE-2025-39827\n\nCVE-2025-39845\n\nCVE-2025-39866\n\nCVE-2025-39871\n\nCVE-2025-39931\n\nCVE-2025-39953\n\nCVE-2025-39955\n\nCVE-2025-39964\n\nCVE-2025-39977\n\nCVE-2025-39978\n\nCVE-2025-39980\n\nCVE-2025-40022\n\nCVE-2025-40070\n\nCVE-2025-40078\n\nCVE-2025-40080\n\nCVE-2025-40105\n\nCVE-2025-40135\n\nCVE-2025-40149\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-40300\n\nCVE-2025-61984\n\nCVE-2025-61985\n\nCVE-2025-68206\n\nCVE-2025-68261\n\nCVE-2025-68264\n\nCVE-2025-68265\n\nCVE-2025-68266\n\nCVE-2025-68291\n\nCVE-2025-68337\n\nCVE-2025-68349\n\nCVE-2025-68363\n\nCVE-2025-68371\n\nCVE-2025-68724\n\nCVE-2025-68725\n\nCVE-2025-68742\n\nCVE-2025-68764\n\nCVE-2025-68773\n\nCVE-2025-68776\n\nCVE-2025-68782\n\nCVE-2025-68787\n\nCVE-2025-68788\n\nCVE-2025-68798\n\nCVE-2025-68803\n\nCVE-2025-68814\n\nCVE-2025-68816\n\nCVE-2025-68818\n\nCVE-2025-68820\n\nCVE-2025-71064\n\nCVE-2025-71075\n\nCVE-2025-71079\n\nCVE-2025-71085\n\nCVE-2025-71086\n\nCVE-2025-71088\n\nCVE-2025-71095\n\nCVE-2025-71097\n\nCVE-2025-71098\n\nCVE-2025-71104\n\nCVE-2025-71112\n\nCVE-2025-71113\n\nCVE-2025-71114\n\nCVE-2025-71120\n\nCVE-2025-71123\n\nCVE-2025-71131\n\nCVE-2025-71161\n\nCVE-2025-71162\n\nCVE-2025-71163\n\nCVE-2025-71185\n\nCVE-2025-71186\n\nCVE-2025-71189\n\nCVE-2025-71190\n\nCVE-2025-71191\n\nCVE-2025-71197\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-22977\n\nCVE-2026-22979\n\nCVE-2026-22980\n\nCVE-2026-22982\n\nCVE-2026-22992\n\nCVE-2026-22994\n\nCVE-2026-23003\n\nCVE-2026-23005\n\nCVE-2026-23010\n\nCVE-2026-23011\n\nCVE-2026-23019\n\nCVE-2026-23026\n\nCVE-2026-23038\n\nCVE-2026-23054\n\nCVE-2026-23060\n\nCVE-2026-23083\n\nCVE-2026-23084\n\nCVE-2026-23086\n\nCVE-2026-23087\n\nCVE-2026-23095\n\nCVE-2026-23100\n\nCVE-2026-23103\n\nCVE-2026-23110\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-27135\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31682\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-3497\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-46174\n\nCVE-2026-46333\n\nCVE-2023-53292\n\nCVE-2025-21863\n\nCVE-2025-40196\n\nCVE-2026-23255\n\nCVE-2026-23399\n\nCVE-2026-31449\n\nCVE-2026-31681\n\nCVE-2026-31700\n\nCVE-2026-43071\n\nCVE-2026-43085\n\nCVE-2026-43089\n\nCVE-2026-43116\n\nCVE-2026-43216\n\nCVE-2026-43303\n\nCVE-2026-43492\n\nCVE-2026-43499\n\nCVE-2026-43501\n\nCVE-2026-45841\n\nCVE-2026-46015\n\nCVE-2026-46021\n\nCVE-2026-46033\n\nCVE-2026-46037\n\nCVE-2026-46040\n\nCVE-2026-46046\n\nCVE-2026-46086\n\nCVE-2026-46101\n\nCVE-2026-46116\n\nCVE-2026-46132\n\nCVE-2026-46172\n\nCVE-2026-46173\n\nCVE-2026-46193\n\nCVE-2026-46303\n\nCVE-2026-46306\n\nCVE-2026-46323\n\nCVE-2026-52910\n\nCVE-2026-52912\n\nCVE-2026-52930\n\nCVE-2026-52933\n\nCVE-2026-52942\n\nCVE-2026-52943\n\nCVE-2026-52946\n\nCVE-2026-52970\n\nCVE-2026-52986\n\nCVE-2026-52998\n\nCVE-2026-52999\n\nCVE-2026-53001\n\nCVE-2026-53002\n\nCVE-2026-53006\n\nCVE-2026-53012\n\nCVE-2026-53050\n\nCVE-2026-53134\n\nCVE-2026-53218\n\nCVE-2026-53219\n\nCVE-2026-53223\n\nCVE-2026-53236\n\nCVE-2026-53239\n\nCVE-2026-53249\n\nCVE-2026-53268\n\nCVE-2026-53269\n\nCVE-2026-53275\n\nCVE-2026-53295\n\nCVE-2026-53352\n\nCVE-2026-53400\n\nCVE-2026-63810\n\nCVE-2026-64279\n\nCVE-2026-64317\n\nCVE-2026-64370\n\nCVE-2026-64371\n\nCVE-2026-64375\n\nCVE-2026-64411\n\nCVE-2026-64412\n\nCVE-2026-64413\n\nCVE-2026-64422\n\nCVE-2026-64423\n\nCVE-2026-64425\n\nCVE-2026-64538\n\nCVE-2026-64545\n\nCVE-2026-64552\n\nCVE-2026-64560\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)\n\nAll versions >= V3.1.6 < V3.1.7\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-31431\n\nCVE-2026-43284\n\nCVE-2026-46300\n\nUpdate to V3.1.7 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)\n\nAll versions >= V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-51384\n\nCVE-2023-52927\n\nCVE-2024-26783\n\nCVE-2024-27056\n\nCVE-2024-28956\n\nCVE-2024-36903\n\nCVE-2024-36927\n\nCVE-2024-42079\n\nCVE-2024-46786\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49968\n\nCVE-2024-49994\n\nCVE-2024-49998\n\nCVE-2024-50014\n\nCVE-2024-50063\n\nCVE-2024-50164\n\nCVE-2024-50298\n\nCVE-2024-53124\n\nCVE-2024-53170\n\nCVE-2024-54458\n\nCVE-2024-56631\n\nCVE-2024-56703\n\nCVE-2024-56719\n\nCVE-2024-57917\n\nCVE-2024-57924\n\nCVE-2024-57973\n\nCVE-2024-57977\n\nCVE-2024-57979\n\nCVE-2024-58011\n\nCVE-2024-58016\n\nCVE-2024-58020\n\nCVE-2024-58056\n\nCVE-2024-58058\n\nCVE-2024-58061\n\nCVE-2024-58086\n\nCVE-2025-21645\n\nCVE-2025-21648\n\nCVE-2025-21655\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-21702\n\nCVE-2025-21705\n\nCVE-2025-21706\n\nCVE-2025-21707\n\nCVE-2025-21718\n\nCVE-2025-21731\n\nCVE-2025-21745\n\nCVE-2025-21758\n\nCVE-2025-21760\n\nCVE-2025-21764\n\nCVE-2025-21765\n\nCVE-2025-21780\n\nCVE-2025-21795\n\nCVE-2025-21796\n\nCVE-2025-21802\n\nCVE-2025-21814\n\nCVE-2025-21846\n\nCVE-2025-21853\n\nCVE-2025-21861\n\nCVE-2025-21864\n\nCVE-2025-21867\n\nCVE-2025-21875\n\nCVE-2025-21887\n\nCVE-2025-21913\n\nCVE-2025-21919\n\nCVE-2025-21925\n\nCVE-2025-21926\n\nCVE-2025-21938\n\nCVE-2025-21959\n\nCVE-2025-21999\n\nCVE-2025-22005\n\nCVE-2025-22015\n\nCVE-2025-22055\n\nCVE-2025-22056\n\nCVE-2025-22060\n\nCVE-2025-22083\n\nCVE-2025-22090\n\nCVE-2025-22095\n\nCVE-2025-22107\n\nCVE-2025-22111\n\nCVE-2025-22121\n\nCVE-2025-23136\n\nCVE-2025-23143\n\nCVE-2025-37785\n\nCVE-2025-37909\n\nCVE-2025-37917\n\nCVE-2025-37945\n\nCVE-2025-37959\n\nCVE-2025-37964\n\nCVE-2025-37972\n\nCVE-2025-37980\n\nCVE-2025-38125\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38232\n\nCVE-2025-38322\n\nCVE-2025-38591\n\nCVE-2025-38614\n\nCVE-2025-38681\n\nCVE-2025-38704\n\nCVE-2025-38721\n\nCVE-2025-38725\n\nCVE-2025-38727\n\nCVE-2025-38732\n\nCVE-2025-38736\n\nCVE-2025-39681\n\nCVE-2025-39691\n\nCVE-2025-39721\n\nCVE-2025-39748\n\nCVE-2025-39756\n\nCVE-2025-39764\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39782\n\nCVE-2025-39795\n\nCVE-2025-39826\n\nCVE-2025-39827\n\nCVE-2025-39845\n\nCVE-2025-39866\n\nCVE-2025-39871\n\nCVE-2025-39931\n\nCVE-2025-39953\n\nCVE-2025-39955\n\nCVE-2025-39964\n\nCVE-2025-39977\n\nCVE-2025-39978\n\nCVE-2025-39980\n\nCVE-2025-40022\n\nCVE-2025-40070\n\nCVE-2025-40078\n\nCVE-2025-40080\n\nCVE-2025-40105\n\nCVE-2025-40135\n\nCVE-2025-40149\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-40300\n\nCVE-2025-61984\n\nCVE-2025-61985\n\nCVE-2025-68206\n\nCVE-2025-68261\n\nCVE-2025-68264\n\nCVE-2025-68265\n\nCVE-2025-68266\n\nCVE-2025-68291\n\nCVE-2025-68337\n\nCVE-2025-68349\n\nCVE-2025-68363\n\nCVE-2025-68371\n\nCVE-2025-68724\n\nCVE-2025-68725\n\nCVE-2025-68742\n\nCVE-2025-68764\n\nCVE-2025-68773\n\nCVE-2025-68776\n\nCVE-2025-68782\n\nCVE-2025-68787\n\nCVE-2025-68788\n\nCVE-2025-68798\n\nCVE-2025-68803\n\nCVE-2025-68814\n\nCVE-2025-68816\n\nCVE-2025-68818\n\nCVE-2025-68820\n\nCVE-2025-71064\n\nCVE-2025-71075\n\nCVE-2025-71079\n\nCVE-2025-71085\n\nCVE-2025-71086\n\nCVE-2025-71088\n\nCVE-2025-71095\n\nCVE-2025-71097\n\nCVE-2025-71098\n\nCVE-2025-71104\n\nCVE-2025-71112\n\nCVE-2025-71113\n\nCVE-2025-71114\n\nCVE-2025-71120\n\nCVE-2025-71123\n\nCVE-2025-71131\n\nCVE-2025-71161\n\nCVE-2025-71162\n\nCVE-2025-71163\n\nCVE-2025-71185\n\nCVE-2025-71186\n\nCVE-2025-71189\n\nCVE-2025-71190\n\nCVE-2025-71191\n\nCVE-2025-71197\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-22977\n\nCVE-2026-22979\n\nCVE-2026-22980\n\nCVE-2026-22982\n\nCVE-2026-22992\n\nCVE-2026-22994\n\nCVE-2026-23003\n\nCVE-2026-23005\n\nCVE-2026-23010\n\nCVE-2026-23011\n\nCVE-2026-23019\n\nCVE-2026-23026\n\nCVE-2026-23038\n\nCVE-2026-23054\n\nCVE-2026-23060\n\nCVE-2026-23083\n\nCVE-2026-23084\n\nCVE-2026-23086\n\nCVE-2026-23087\n\nCVE-2026-23095\n\nCVE-2026-23100\n\nCVE-2026-23103\n\nCVE-2026-23110\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-27135\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31682\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-3497\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-46174\n\nCVE-2026-46333\n\nCVE-2023-53292\n\nCVE-2025-21863\n\nCVE-2025-40196\n\nCVE-2026-23255\n\nCVE-2026-23399\n\nCVE-2026-31449\n\nCVE-2026-31681\n\nCVE-2026-31700\n\nCVE-2026-43071\n\nCVE-2026-43085\n\nCVE-2026-43089\n\nCVE-2026-43116\n\nCVE-2026-43216\n\nCVE-2026-43303\n\nCVE-2026-43492\n\nCVE-2026-43499\n\nCVE-2026-43501\n\nCVE-2026-45841\n\nCVE-2026-46015\n\nCVE-2026-46021\n\nCVE-2026-46033\n\nCVE-2026-46037\n\nCVE-2026-46040\n\nCVE-2026-46046\n\nCVE-2026-46086\n\nCVE-2026-46101\n\nCVE-2026-46116\n\nCVE-2026-46132\n\nCVE-2026-46172\n\nCVE-2026-46173\n\nCVE-2026-46193\n\nCVE-2026-46303\n\nCVE-2026-46306\n\nCVE-2026-46323\n\nCVE-2026-52910\n\nCVE-2026-52912\n\nCVE-2026-52930\n\nCVE-2026-52933\n\nCVE-2026-52942\n\nCVE-2026-52943\n\nCVE-2026-52946\n\nCVE-2026-52970\n\nCVE-2026-52986\n\nCVE-2026-52998\n\nCVE-2026-52999\n\nCVE-2026-53001\n\nCVE-2026-53002\n\nCVE-2026-53006\n\nCVE-2026-53012\n\nCVE-2026-53050\n\nCVE-2026-53134\n\nCVE-2026-53218\n\nCVE-2026-53219\n\nCVE-2026-53223\n\nCVE-2026-53236\n\nCVE-2026-53239\n\nCVE-2026-53249\n\nCVE-2026-53268\n\nCVE-2026-53269\n\nCVE-2026-53275\n\nCVE-2026-53295\n\nCVE-2026-53352\n\nCVE-2026-53400\n\nCVE-2026-63810\n\nCVE-2026-64279\n\nCVE-2026-64317\n\nCVE-2026-64370\n\nCVE-2026-64371\n\nCVE-2026-64375\n\nCVE-2026-64411\n\nCVE-2026-64412\n\nCVE-2026-64413\n\nCVE-2026-64422\n\nCVE-2026-64423\n\nCVE-2026-64425\n\nCVE-2026-64538\n\nCVE-2026-64545\n\nCVE-2026-64552\n\nCVE-2026-64560\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)\n\nAll versions >= V3.1.6 < V3.1.7\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-31431\n\nCVE-2026-43284\n\nCVE-2026-46300\n\nUpdate to V3.1.7 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)\n\nAll versions >= V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-51384\n\nCVE-2023-52927\n\nCVE-2024-26783\n\nCVE-2024-27056\n\nCVE-2024-28956\n\nCVE-2024-36903\n\nCVE-2024-36927\n\nCVE-2024-42079\n\nCVE-2024-46786\n\nCVE-20", "truncated": true, "representation": "html_text_excerpt", "relatedCve": "CVE-2026-31431", "relatedCves": [ "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31682", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-3497", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-46174", "CVE-2026-46333", "CVE-2023-53292", "CVE-2025-21863", "CVE-2025-40196", "CVE-2026-23255", "CVE-2026-23399", "CVE-2026-31449", "CVE-2026-31681", "CVE-2026-31700", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560", "CVE-2026-31431", "CVE-2026-43284", "CVE-2026-46300", "CVE-2025-38617" ] }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "sourcePath": "body:advisory", "text": "SSA-082556\n\nSiemens Security Advisory by Siemens ProductCERT\n\nSSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5\n\nPublication Date:\n\n2025-06-10\n\nLast Update:\n\n2026-10-13\n\nCurrent Version:\n\nV1.7\n\nCVSS v3.1 Base Score:\n10.0\n\nCVSS v4.0 Base Score:\n8.7\n\nSUMMARY\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nSIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113 .\n\nKNOWN AFFECTED PRODUCTS\n\nUn-/Collapse All\n\nAffected Product and Versions\nRemediation\n\nExpand children\n\nSIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants)\n\nShow more details\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\nAll versions >= V3.1.5\n\naffected by\n\nmultiple CVEs\n\nCVE-2024-58005\n\nCVE-2023-52927\n\nCVE-2024-53166\n\nCVE-2025-21848\n\nCVE-2025-21712\n\nCVE-2025-21865\n\nCVE-2025-21862\n\nCVE-2025-21864\n\nCVE-2025-21756\n\nCVE-2025-21702\n\nCVE-2024-50246\n\nCVE-2024-57977\n\nCVE-2024-24855\n\nCVE-2024-26596\n\nCVE-2025-21701\n\nCVE-2025-21767\n\nCVE-2025-21728\n\nCVE-2025-21766\n\nCVE-2025-21795\n\nCVE-2025-21724\n\nCVE-2025-21765\n\nCVE-2024-57996\n\nCVE-2025-21796\n\nCVE-2025-21758\n\nCVE-2025-21745\n\nCVE-2023-4527\n\nCVE-2023-4806\n\nCVE-2023-4911\n\nCVE-2023-38545\n\nCVE-2023-38546\n\nCVE-2023-5363\n\nCVE-2023-44487\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-48795\n\nCVE-2023-51384\n\nCVE-2023-51385\n\nCVE-2023-46218\n\nCVE-2023-46219\n\nCVE-2023-6246\n\nCVE-2023-6779\n\nCVE-2023-6780\n\nCVE-2024-28085\n\nCVE-2024-2961\n\nCVE-2024-33599\n\nCVE-2024-33600\n\nCVE-2024-33601\n\nCVE-2024-33602\n\nCVE-2024-34397\n\nCVE-2024-6387\n\nCVE-2024-37370\n\nCVE-2024-37371\n\nCVE-2024-6119\n\nCVE-2024-45490\n\nCVE-2024-45491\n\nCVE-2024-45492\n\nCVE-2024-12133\n\nCVE-2024-12243\n\nCVE-2025-26465\n\nCVE-2025-31115\n\nCVE-2025-46836\n\nCVE-2025-4598\n\nCVE-2025-4373\n\nCVE-2025-6395\n\nCVE-2025-32988\n\nCVE-2025-32989\n\nCVE-2025-3198\n\nCVE-2025-5244\n\nCVE-2025-5245\n\nCVE-2025-7425\n\nCVE-2025-7545\n\nCVE-2025-7546\n\nCVE-2025-8224\n\nCVE-2025-9230\n\nCVE-2025-9232\n\nCVE-2025-11082\n\nCVE-2025-11083\n\nCVE-2025-11412\n\nCVE-2025-11413\n\nCVE-2025-11414\n\nCVE-2025-11494\n\nCVE-2025-11495\n\nCVE-2025-11839\n\nCVE-2025-11840\n\nCVE-2025-39929\n\nCVE-2025-39931\n\nCVE-2025-39977\n\nCVE-2025-40022\n\nCVE-2025-59375\n\nCVE-2025-66382\n\nCVE-2024-57924\n\nCVE-2025-38614\n\nCVE-2025-38685\n\nCVE-2025-38691\n\nCVE-2025-38701\n\nCVE-2025-38702\n\nCVE-2025-38708\n\nCVE-2025-38721\n\nCVE-2025-38724\n\nCVE-2025-38727\n\nCVE-2025-39683\n\nCVE-2025-39689\n\nCVE-2025-39697\n\nCVE-2025-39724\n\nCVE-2025-39756\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39783\n\nCVE-2025-39787\n\nCVE-2025-39795\n\nCVE-2025-39798\n\nCVE-2025-39866\n\nCVE-2025-38058\n\nCVE-2025-38063\n\nCVE-2025-38067\n\nCVE-2025-38071\n\nCVE-2025-38079\n\nCVE-2025-38083\n\nCVE-2025-38100\n\nCVE-2025-38111\n\nCVE-2025-38124\n\nCVE-2025-38167\n\nCVE-2025-38198\n\nCVE-2025-38212\n\nCVE-2025-38214\n\nCVE-2025-38215\n\nCVE-2025-38222\n\nCVE-2025-38231\n\nCVE-2025-38236\n\nCVE-2025-38280\n\nCVE-2025-38285\n\nCVE-2025-38312\n\nCVE-2025-38342\n\nCVE-2025-38350\n\nCVE-2025-38364\n\nCVE-2025-38393\n\nCVE-2025-38400\n\nCVE-2025-38430\n\nCVE-2025-38451\n\nCVE-2025-38457\n\nCVE-2025-38465\n\nCVE-2025-38466\n\nCVE-2025-38468\n\nCVE-2025-38470\n\nCVE-2025-38471\n\nCVE-2025-38477\n\nCVE-2025-38498\n\nCVE-2025-38499\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49998\n\nCVE-2024-50298\n\nCVE-2024-56719\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-37945\n\nCVE-2025-37980\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38704\n\nCVE-2025-39748\n\nCVE-2025-39764\n\nCVE-2025-40135\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-68206\n\nCVE-2025-68265\n\nCVE-2025-71161\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-23100\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31431\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31682\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-43284\n\nCVE-2026-46174\n\nCVE-2026-46300\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\nAll versions >= V3.1.5 < V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-32776\n\nCVE-2026-32777\n\nCVE-2026-32778\n\nCVE-2026-3904\n\nCVE-2026-4046\n\nCVE-2026-41080\n\nCVE-2026-4437\n\nCVE-2026-4438\n\nCVE-2026-45186\n\nCVE-2026-5435\n\nCVE-2026-5450\n\nCVE-2026-5928\n\nCVE-2026-6238\n\nUpdate to V3.1.6 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)\n\nAll versions >= V3.1.5\n\naffected by\n\nmultiple CVEs\n\nCVE-2024-58005\n\nCVE-2023-52927\n\nCVE-2024-53166\n\nCVE-2025-21848\n\nCVE-2025-21712\n\nCVE-2025-21865\n\nCVE-2025-21862\n\nCVE-2025-21864\n\nCVE-2025-21756\n\nCVE-2025-21702\n\nCVE-2024-50246\n\nCVE-2024-57977\n\nCVE-2024-24855\n\nCVE-2024-26596\n\nCVE-2025-21701\n\nCVE-2025-21767\n\nCVE-2025-21728\n\nCVE-2025-21766\n\nCVE-2025-21795\n\nCVE-2025-21724\n\nCVE-2025-21765\n\nCVE-2024-57996\n\nCVE-2025-21796\n\nCVE-2025-21758\n\nCVE-2025-21745\n\nCVE-2023-4527\n\nCVE-2023-4806\n\nCVE-2023-4911\n\nCVE-2023-38545\n\nCVE-2023-38546\n\nCVE-2023-5363\n\nCVE-2023-44487\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-48795\n\nCVE-2023-51384\n\nCVE-2023-51385\n\nCVE-2023-46218\n\nCVE-2023-46219\n\nCVE-2023-6246\n\nCVE-2023-6779\n\nCVE-2023-6780\n\nCVE-2024-28085\n\nCVE-2024-2961\n\nCVE-2024-33599\n\nCVE-2024-33600\n\nCVE-2024-33601\n\nCVE-2024-33602\n\nCVE-2024-34397\n\nCVE-2024-6387\n\nCVE-2024-37370\n\nCVE-2024-37371\n\nCVE-2024-6119\n\nCVE-2024-45490\n\nCVE-2024-45491\n\nCVE-2024-45492\n\nCVE-2024-12133\n\nCVE-2024-12243\n\nCVE-2025-26465\n\nCVE-2025-31115\n\nCVE-2025-46836\n\nCVE-2025-4598\n\nCVE-2025-4373\n\nCVE-2025-6395\n\nCVE-2025-32988\n\nCVE-2025-32989\n\nCVE-2025-3198\n\nCVE-2025-5244\n\nCVE-2025-5245\n\nCVE-2025-7425\n\nCVE-2025-7545\n\nCVE-2025-7546\n\nCVE-2025-8224\n\nCVE-2025-9230\n\nCVE-2025-9232\n\nCVE-2025-11082\n\nCVE-2025-11083\n\nCVE-2025-11412\n\nCVE-2025-11413\n\nCVE-2025-11414\n\nCVE-2025-11494\n\nCVE-2025-11495\n\nCVE-2025-11839\n\nCVE-2025-11840\n\nCVE-2025-39929\n\nCVE-2025-39931\n\nCVE-2025-39977\n\nCVE-2025-40022\n\nCVE-2025-59375\n\nCVE-2025-66382\n\nCVE-2024-57924\n\nCVE-2025-38614\n\nCVE-2025-38685\n\nCVE-2025-38691\n\nCVE-2025-38701\n\nCVE-2025-38702\n\nCVE-2025-38708\n\nCVE-2025-38721\n\nCVE-2025-38724\n\nCVE-2025-38727\n\nCVE-2025-39683\n\nCVE-2025-39689\n\nCVE-2025-39697\n\nCVE-2025-39724\n\nCVE-2025-39756\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39783\n\nCVE-2025-39787\n\nCVE-2025-39795\n\nCVE-2025-39798\n\nCVE-2025-39866\n\nCVE-2025-38058\n\nCVE-2025-38063\n\nCVE-2025-38067\n\nCVE-2025-38071\n\nCVE-2025-38079\n\nCVE-2025-38083\n\nCVE-2025-38100\n\nCVE-2025-38111\n\nCVE-2025-38124\n\nCVE-2025-38167\n\nCVE-2025-38198\n\nCVE-2025-38212\n\nCVE-2025-38214\n\nCVE-2025-38215\n\nCVE-2025-38222\n\nCVE-2025-38231\n\nCVE-2025-38236\n\nCVE-2025-38280\n\nCVE-2025-38285\n\nCVE-2025-38312\n\nCVE-2025-38342\n\nCVE-2025-38350\n\nCVE-2025-38364\n\nCVE-2025-38393\n\nCVE-2025-38400\n\nCVE-2025-38430\n\nCVE-2025-38451\n\nCVE-2025-38457\n\nCVE-2025-38465\n\nCVE-2025-38466\n\nCVE-2025-38468\n\nCVE-2025-38470\n\nCVE-2025-38471\n\nCVE-2025-38477\n\nCVE-2025-38498\n\nCVE-2025-38499\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49998\n\nCVE-2024-50298\n\nCVE-2024-56719\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-37945\n\nCVE-2025-37980\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38704\n\nCVE-2025-39748\n\nCVE-2025-39764\n\nCVE-2025-40135\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-68206\n\nCVE-2025-68265\n\nCVE-2025-71161\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-23100\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31431\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31682\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-43284\n\nCVE-2026-46174\n\nCVE-2026-46300\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)\n\nAll versions >= V3.1.5 < V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-32776\n\nCVE-2026-32777\n\nCVE-2026-32778\n\nCVE-2026-3904\n\nCVE-2026-4046\n\nCVE-2026-41080\n\nCVE-2026-4437\n\nCVE-2026-4438\n\nCVE-2026-45186\n\nCVE-2026-5435\n\nCVE-2026-5450\n\nCVE-2026-5928\n\nCVE-2026-6238\n\nUpdate to V3.1.6 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)\n\nAll versions >= V3.1.5\n\naffected by\n\nmultiple CVEs\n\nCVE-2024-58005\n\nCVE-2023-52927\n\nCVE-2024-53166\n\nCVE-2025-21848\n\nCVE-2025-21712\n\nCVE-2025-21865\n\nCVE-2025-21862\n\nCVE-2025-21864\n\nCVE-2025-21756\n\nCVE-2025-21702\n\nCVE-2024-50246\n\nCVE-2024-57977\n\nCVE-2024-24855\n\nCVE-2024-26596\n\nCVE-2025-21701\n\nCVE-2025-21767\n\nCVE-2025-21728\n\nCVE-2025-21766\n\nCVE-2025-21795\n\nCVE-2025-21724\n\nCVE-2025-21765\n\nCVE-2024-57996\n\nCVE-2025-21796\n\nCVE-2025-21758\n\nCVE-2025-21745\n\nCVE-2023-4527\n\nCVE-2023-4806\n\nCVE-2023-4911\n\nCVE-2023-38545\n\nCVE-2023-38546\n\nCVE-2023-5363\n\nCVE-2023-44487\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-48795\n\nCVE-2023-51384\n\nCVE-2023-51385\n\nCVE-2023-46218\n\nCVE-2023-46219\n\nCVE-2023-6246\n\nCVE-2023-6779\n\nCVE-2023-6780\n\nCVE-2024-28085\n\nCVE-2024-2961\n\nCVE-2024-33599\n\nCVE-2024-33600\n\nCVE-2024-33601\n\nCVE-2024-33602\n\nCVE-2024-34397\n\nCVE-2024-6387\n\nCVE-2024-37370\n\nCVE-2024-37371\n\nCVE-2024-6119\n\nCVE-2024-45490\n\nCVE-2024-45491\n\nCVE-2024-45492\n\nCVE-2024-12133\n\nCVE-2024-12243\n\nCVE-2025-26465\n\nCVE-2025-31115\n\nCVE-2025-46836\n\nCVE-2025-4598\n\nCVE-2025-4373\n\nCVE-2025-6395\n\nCVE-2025-32988\n\nCVE-2025-32989\n\nCVE-2025-3198\n\nCVE-2025-5244\n\nCVE-2025-5245\n\nCVE-2025-7425\n\nCVE-2025-7545\n\nCVE-2025-7546\n\nCVE-2025-8224\n\nCVE-2025-9230\n\nCVE-2025-9232\n\nCVE-2025-11082\n\nCVE-2025-11083\n\nCVE-2025-11412\n\nCVE-2025-11413\n\nCVE-2025-11414\n\nCVE-2025-11494\n\nCVE-2025-11495\n\nCVE-2025-11839\n\nCVE-2025-11840\n\nCVE-2025-39929\n\nCVE-2025-39931\n\nCVE-2025-39977\n\nCVE-2025-40022\n\nCVE-2025-59375\n\nCVE-2025-66382\n\nCVE-2024-57924\n\nCVE-2025-38614\n\nCVE-2025-38685\n\nCVE-2025-38691\n\nCVE-2025-38701\n\nCVE-2025-38702\n\nCVE-2025-38708\n\nCVE-2025-38721\n\nCVE-2025-38724\n\nCVE-2025-38727\n\nCVE-2025-39683\n\nCVE-2025-39689\n\nCVE-2025-39697\n\nCVE-2025-39724\n\nCVE-2025-39756\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39783\n\nCVE-2025-39787\n\nCVE-2025-39795\n\nCVE-2025-39798\n\nCVE-2025-39866\n\nCVE-2025-38058\n\nCVE-2025-38063\n\nCVE-2025-38067\n\nCVE-2025-38071\n\nCVE-2025-38079\n\nCVE-2025-38083\n\nCVE-2025-38100\n\nCVE-2025-38111\n\nCVE-2025-38124\n\nCVE-2025-38167\n\nCVE-2025-38198\n\nCVE-2025-38212\n\nCVE-2025-38214\n\nCVE-2025-38215\n\nCVE-2025-38222\n\nCVE-2025-38231\n\nCVE-2025-38236\n\nCVE-2025-38280\n\nCVE-2025-38285\n\nCVE-2025-38312\n\nCVE-2025-38342\n\nCVE-2025-38350\n\nCVE-2025-38364\n\nCVE-2025-38393\n\nCVE-2025-38400\n\nCVE-2025-38430\n\nCVE-2025-38451\n\nCVE-2025-38457\n\nCVE-2025-38465\n\nCVE-2025-38466\n\nCVE-2025-38468\n\nCVE-2025-38470\n\nCVE-2025-38471\n\nCVE-2025-38477\n\nCVE-2025-38498\n\nCVE-2025-38499\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49998\n\nCVE-2024-50298\n\nCVE-2024-56719\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-37945\n\nCVE-2025-37980\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38704\n\nCVE-2025-39748\n\nCVE-2025-39764\n\nCVE-2025-40135\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-68206\n\nCVE-2025-68265\n\nCVE-2025-71161\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-23100\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31431\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31682\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-43284\n\nCVE-2026-46174\n\nCVE-2026-46300\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)\n\nAll versions >= V3.1.5 < V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-32776\n\nCVE-2026-32777\n\nCVE-2026-32778\n\nCVE-2026-3904\n\nCVE-2026-4046\n\nCVE-2026-41080\n\nCVE-2026-4437\n\nCVE-2026-4438\n\nCVE-2026-45186\n\nCVE-2026-5435\n\nCVE-2026-5450\n\nCVE-2026-5928\n\nCVE-2026-6238\n\nUpdate to V3.1.6 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)\n\nShow more details\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)\n\nAll versions >= V3.1.5\n\naffected by\n\nmultiple CVEs\n\nCVE-2024-58005\n\nCVE-2023-52927\n\nCVE-2024-53166\n\nCVE-2025-21848\n\nCVE-2025-21712\n\nCVE-2025-21865\n\nCVE-2025-21862\n\nCVE-2025-21864\n\nCVE-2025-21756\n\nCVE-2025-21702\n\nCVE-2024-50246\n\nCVE-2024-57977\n\nCVE-2024-24855\n\nCVE-2024-26596\n\nCVE-2025-21701\n\nCVE-2025-21767\n\nCVE-2025-21728\n\nCVE-2025-21766\n\nCVE-2025-21795\n\nCVE-2025-21724\n\nCVE-2025-21765\n\nCVE-2024-57996\n\nCVE-2025-21796\n\nCVE-2025-21758\n\nCVE-2025-21745\n\nCVE-2023-4527\n\nCVE-2023-4806\n\nCVE-2023-4911\n\nCVE-2023-38545\n\nCVE-2023-38546\n\nCVE-2023-5363\n\nCVE-2023-44487\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-48795\n\nCVE-2023-51384\n\nCVE-2023-51385\n\nCVE-2023-46218\n\nCVE-2023-46219\n\nCVE-2023-6246\n\nCVE-2023-6779\n\nCVE-2023-6780\n\nCVE-2024-28085\n\nCVE-2024-2961\n\nCVE-2024-33599\n\nCVE-2024-33600\n\nCVE-2024-33601\n\nCVE-2024-33602\n\nCVE-2024-34397\n\nCVE-2024-6387\n\nCVE-2024-37370\n\nCVE-2024-37371\n\nCVE-2024-6119\n\nCVE-2024-45490\n\nCVE-2024-45491\n\nCVE-2024-45492\n\nCVE-2024-12133\n\nCVE-2024-12243\n\nCVE-2025-26465\n\nCVE-2025-31115\n\nCVE-2025-46836\n\nCVE-2025-4598\n\nCVE-2025-4373\n\nCVE-2025-6395\n\nCVE-2025-32988\n\nCVE-2025-32989\n\nCVE-2025-3198\n\nCVE-2025-5244\n\nCVE-2025-5245\n\nCVE-2025-7425\n\nCVE-2025-7545\n\nCVE-2025-7546\n\nCVE-2025-8224\n\nCVE-2025-9230\n\nCVE-2025-9232\n\nCVE-2025-11082\n\nCVE-2025-11083\n\nCVE-2025-11412\n\nCVE-2025-11413\n\nCVE-2025-11414\n\nCVE-2025-11494\n\nCVE-2025-11495\n\nCVE-2025-11839\n\nCVE-2025-11840\n\nCVE-2025-39929\n\nCVE-2025-39931\n\nCVE-2025-39977\n\nCVE-2025-40022\n\nCVE-2025-59375\n\nCVE-2025-66382\n\nCVE-2024-57924\n\nCVE-2025-38614\n\nCVE-2025-38685\n\nCVE-2025-38691\n\nCVE-2025-38701\n\nCVE-2025-38702\n\nCVE-2025-38708\n\nCVE-2025-38721\n\nCVE-2025-38724\n\nCVE-2025-38727\n\nCVE-2025-39683\n\nCVE-2025-39689\n\nCVE-2025-39697\n\nCVE-2025-39724\n\nCVE-2025-39756\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39783\n\nCVE-2025-39787\n\nCVE-2025-39795\n\nCVE-2025-39798\n\nCVE-2025-39866\n\nCVE-2025-38058\n\nCVE-2025-38063\n\nCVE-2025-38067\n\nCVE-2025-38071\n\nCVE-2025-38079\n\nCVE-2025-38083\n\nCVE-2025-38100\n\nCVE-2025-38111\n\nCVE-2025-38124\n\nCVE-2025-38167\n\nCVE-2025-38198\n\nCVE-2025-38212\n\nCVE-2025-38214\n\nCVE-2025-38215\n\nCVE-2025-38222\n\nCVE-2025-38231\n\nCVE-2025-38236\n\nCVE-2025-38280\n\nCVE-2025-38285\n\nCVE-2025-38312\n\nCVE-2025-38342\n\nCVE-2025-38350\n\nCVE-2025-38364\n\nCVE-2025-38393\n\nCVE-2025-38400\n\nCVE-2025-38430\n\nCVE-2025-38451\n\nCVE-2025-38457\n\nCVE-2025-38465\n\nCVE-2025-38466\n\nCVE-2025-38468\n\nCVE-2025-38470\n\nCVE-2025-38471\n\nCVE-2025-38477\n\nCVE-2025-38498\n\nCVE-2025-38499\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49998\n\nCVE-2024-50298\n\nCVE-2024-56719\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-37945\n\nCVE-2025-37980\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38704\n\nCVE-2025-39748\n\nCVE-2025-39764\n\nCVE-2025-40135\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-68206\n\nCVE-2025-68265\n\nCVE-2025-71161\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-23100\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31431\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31682\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-43284\n\nCVE-2026-46174\n\nCVE-2026-46300\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)\n\nAll versions >= V3.1.5 < V3.1.6\n\naffected by\n\nmultiple CVEs\n\nCVE-2026-32776\n\nCVE-2026-32777\n\nCVE-2026-32778\n\nCVE-2026-3904\n\nCVE-2026-4046\n\nCVE-2026-41080\n\nCVE-2026-4437\n\nCVE-2026-4438\n\nCVE-2026-45186\n\nCVE-2026-5435\n\nCVE-2026-5450\n\nCVE-2026-5928\n\nCVE-2026-6238\n\nUpdate to V3.1.6 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)\n\nShow more details\n\nSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)\n\nAll versions >= V3.1.5\n\naffected by\n\nmultiple CVEs\n\nCVE-2024-58005\n\nCVE-2023-52927\n\nCVE-2024-53166\n\nCVE-2025-21848\n\nCVE-2025-21712\n\nCVE-2025-21865\n\nCVE-2025-21862\n\nCVE-2025-21864\n\nCVE-2025-21756\n\nCVE-2025-21702\n\nCVE-2024-50246\n\nCVE-2024-57977\n\nCVE-2024-24855\n\nCVE-2", "truncated": true, "representation": "html_text_excerpt", "relatedCve": "CVE-2026-31431", "relatedCves": [ "CVE-2024-58005", "CVE-2023-52927", "CVE-2024-53166", "CVE-2025-21848", "CVE-2025-21712", "CVE-2025-21865", "CVE-2025-21862", "CVE-2025-21864", "CVE-2025-21756", "CVE-2025-21702", "CVE-2024-50246", "CVE-2024-57977", "CVE-2024-24855", "CVE-2024-26596", "CVE-2025-21701", "CVE-2025-21767", "CVE-2025-21728", "CVE-2025-21766", "CVE-2025-21795", "CVE-2025-21724", "CVE-2025-21765", "CVE-2024-57996", "CVE-2025-21796", "CVE-2025-21758", "CVE-2025-21745", "CVE-2023-4527", "CVE-2023-4806", "CVE-2023-4911", "CVE-2023-38545", "CVE-2023-38546", "CVE-2023-5363", "CVE-2023-44487", "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-48795", "CVE-2023-51384", "CVE-2023-51385", "CVE-2023-46218", "CVE-2023-46219", "CVE-2023-6246", "CVE-2023-6779", "CVE-2023-6780", "CVE-2024-28085", "CVE-2024-2961", "CVE-2024-33599", "CVE-2024-33600", "CVE-2024-33601", "CVE-2024-33602", "CVE-2024-34397", "CVE-2024-6387", "CVE-2024-37370", "CVE-2024-37371", "CVE-2024-6119", "CVE-2024-45490", "CVE-2024-45491", "CVE-2024-45492", "CVE-2024-12133", "CVE-2024-12243", "CVE-2025-26465", "CVE-2025-31115", "CVE-2025-46836", "CVE-2025-4598", "CVE-2025-4373", "CVE-2025-6395", "CVE-2025-32988", "CVE-2025-32989", "CVE-2025-3198", "CVE-2025-5244", "CVE-2025-5245", "CVE-2025-7425", "CVE-2025-7545", "CVE-2025-7546", "CVE-2025-8224", "CVE-2025-9230", "CVE-2025-9232", "CVE-2025-11082", "CVE-2025-11083", "CVE-2025-11412", "CVE-2025-11413", "CVE-2025-11414", "CVE-2025-11494", "CVE-2025-11495", "CVE-2025-11839", "CVE-2025-11840", "CVE-2025-39929", "CVE-2025-39931", "CVE-2025-39977", "CVE-2025-40022", "CVE-2025-59375", "CVE-2025-66382", "CVE-2024-57924", "CVE-2025-38614", "CVE-2025-38685", "CVE-2025-38691", "CVE-2025-38701", "CVE-2025-38702", "CVE-2025-38708", "CVE-2025-38721", "CVE-2025-38724", "CVE-2025-38727", "CVE-2025-39683", "CVE-2025-39689", "CVE-2025-39697", "CVE-2025-39724", "CVE-2025-39756", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39783", "CVE-2025-39787", "CVE-2025-39795", "CVE-2025-39798", "CVE-2025-39866", "CVE-2025-38058", "CVE-2025-38063", "CVE-2025-38067", "CVE-2025-38071", "CVE-2025-38079", "CVE-2025-38083", "CVE-2025-38100", "CVE-2025-38111", "CVE-2025-38124", "CVE-2025-38167", "CVE-2025-38198", "CVE-2025-38212", "CVE-2025-38214", "CVE-2025-38215", "CVE-2025-38222", "CVE-2025-38231", "CVE-2025-38236", "CVE-2025-38280", "CVE-2025-38285", "CVE-2025-38312", "CVE-2025-38342", "CVE-2025-38350", "CVE-2025-38364", "CVE-2025-38393", "CVE-2025-38400", "CVE-2025-38430", "CVE-2025-38451", "CVE-2025-38457", "CVE-2025-38465", "CVE-2025-38466", "CVE-2025-38468", "CVE-2025-38470", "CVE-2025-38471", "CVE-2025-38477", "CVE-2025-38498", "CVE-2025-38499", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49998", "CVE-2024-50298", "CVE-2024-56719", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-37945", "CVE-2025-37980", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38704", "CVE-2025-39748", "CVE-2025-39764", "CVE-2025-40135", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-68206", "CVE-2025-68265", "CVE-2025-71161", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-23100", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31431", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31682", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43284", "CVE-2026-46174", "CVE-2026-46300", "CVE-2026-32776", "CVE-2026-32777", "CVE-2026-32778", "CVE-2026-3904", "CVE-2026-4046", "CVE-2026-41080", "CVE-2026-4437", "CVE-2026-4438", "CVE-2026-45186", "CVE-2026-5435", "CVE-2026-5450", "CVE-2026-5928", "CVE-2026-6238", "CVE-2006-5051", "CVE-2025-38617", "CVE-2025-32990" ] }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "sourcePath": "body:advisory", "text": "SSA-265688\n\nSiemens Security Advisory by Siemens ProductCERT\n\nSSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1\n\nPublication Date:\n\n2024-04-09\n\nLast Update:\n\n2026-10-13\n\nCurrent Version:\n\nV2.3\n\nCVSS v3.1 Base Score:\n9.8\n\nCVSS v4.0 Base Score:\n8.2\n\nSUMMARY\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nSIMATIC S7-1500 TM MFP V1.1 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version.\n\nNote: This SSA advises vulnerabilities for firmware version V1.1 only; for version V1.1.1 refer to SSA-784472 .\n\nKNOWN AFFECTED PRODUCTS\n\nUn-/Collapse All\n\nAffected Product and Versions\nRemediation\n\nExpand children\n\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem\n\nShow more details\n\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem\n\nAll versions < V1.1.1\n\naffected by\n\nmultiple CVEs\n\nCVE-2023-5678\n\nCVE-2024-0727\n\nCVE-2023-6121\n\nCVE-2023-45898\n\nCVE-2023-6932\n\nCVE-2023-6931\n\nCVE-2023-6817\n\nCVE-2024-2511\n\nCVE-2024-5535\n\nCVE-2024-9143\n\nCVE-2024-36484\n\nCVE-2024-36902\n\nCVE-2024-36904\n\nCVE-2024-36905\n\nCVE-2024-36916\n\nCVE-2024-36929\n\nCVE-2024-36939\n\nCVE-2024-36940\n\nCVE-2024-36959\n\nCVE-2024-44987\n\nCVE-2024-44989\n\nCVE-2024-44990\n\nCVE-2024-45016\n\nCVE-2024-45018\n\nCVE-2024-46679\n\nCVE-2024-46743\n\nCVE-2024-46744\n\nCVE-2024-46745\n\nCVE-2024-46750\n\nCVE-2024-46759\n\nCVE-2024-46783\n\nCVE-2024-47660\n\nCVE-2024-50299\n\nCVE-2024-50301\n\nCVE-2024-53101\n\nCVE-2024-50302\n\nCVE-2023-52447\n\nCVE-2024-22099\n\nCVE-2024-26651\n\nCVE-2024-26659\n\nCVE-2024-26787\n\nCVE-2024-26816\n\nCVE-2024-26820\n\nCVE-2024-26851\n\nCVE-2024-26852\n\nCVE-2024-26855\n\nCVE-2024-26859\n\nCVE-2024-26861\n\nCVE-2024-26863\n\nCVE-2024-26870\n\nCVE-2024-26872\n\nCVE-2024-26875\n\nCVE-2024-26877\n\nCVE-2024-26878\n\nCVE-2024-26880\n\nCVE-2024-26882\n\nCVE-2024-26883\n\nCVE-2024-26884\n\nCVE-2024-26889\n\nCVE-2024-26891\n\nCVE-2024-26894\n\nCVE-2024-26895\n\nCVE-2024-26897\n\nCVE-2024-26898\n\nCVE-2024-26901\n\nCVE-2024-26903\n\nCVE-2024-26906\n\nCVE-2024-26907\n\nCVE-2024-27024\n\nCVE-2024-27025\n\nCVE-2024-27038\n\nCVE-2024-27047\n\nCVE-2024-27052\n\nCVE-2024-27053\n\nCVE-2024-27065\n\nCVE-2024-27076\n\nCVE-2024-27077\n\nCVE-2024-27078\n\nCVE-2024-27419\n\nCVE-2024-27431\n\nCVE-2024-27436\n\nCVE-2024-35828\n\nCVE-2024-35845\n\nCVE-2024-35902\n\nCVE-2024-40961\n\nCVE-2022-48829\n\nCVE-2024-40934\n\nCVE-2024-36286\n\nCVE-2021-47107\n\nCVE-2024-38619\n\nCVE-2024-33847\n\nCVE-2024-39509\n\nCVE-2022-48827\n\nCVE-2024-40941\n\nCVE-2024-38596\n\nCVE-2024-38599\n\nCVE-2024-38565\n\nCVE-2024-42093\n\nCVE-2024-42097\n\nCVE-2024-39502\n\nCVE-2024-40995\n\nCVE-2024-40942\n\nCVE-2024-40960\n\nCVE-2024-38598\n\nCVE-2024-41004\n\nCVE-2024-26629\n\nCVE-2024-41006\n\nCVE-2024-36489\n\nCVE-2024-41005\n\nCVE-2024-39468\n\nCVE-2024-40984\n\nCVE-2024-38567\n\nCVE-2024-39489\n\nCVE-2024-38662\n\nCVE-2021-47316\n\nCVE-2024-39482\n\nCVE-2024-38552\n\nCVE-2024-42094\n\nCVE-2024-40958\n\nCVE-2024-38780\n\nCVE-2024-36894\n\nCVE-2024-40912\n\nCVE-2024-40905\n\nCVE-2024-36974\n\nCVE-2024-40971\n\nCVE-2021-47002\n\nCVE-2024-38558\n\nCVE-2024-38659\n\nCVE-2024-36270\n\nCVE-2024-38612\n\nCVE-2024-41000\n\nCVE-2024-42070\n\nCVE-2024-38547\n\nCVE-2024-38578\n\nCVE-2024-42090\n\nCVE-2024-42082\n\nCVE-2024-37356\n\nCVE-2024-33621\n\nCVE-2024-38615\n\nCVE-2024-38381\n\nCVE-2024-42096\n\nCVE-2024-40959\n\nCVE-2024-38589\n\nCVE-2024-38579\n\nCVE-2024-38560\n\nCVE-2024-34027\n\nCVE-2022-48828\n\nCVE-2024-40978\n\nCVE-2024-40993\n\nCVE-2024-40980\n\nCVE-2024-39503\n\nCVE-2024-38635\n\nCVE-2024-36978\n\nCVE-2021-4090\n\nCVE-2024-23848\n\nCVE-2024-50121\n\nCVE-2023-1652\n\nCVE-2024-42272\n\nCVE-2024-36288\n\nCVE-2021-38202\n\nCVE-2024-49977\n\nCVE-2022-43945\n\nCVE-2024-38559\n\nCVE-2024-50251\n\nCVE-2024-50262\n\nCVE-2024-53042\n\nCVE-2024-53057\n\nCVE-2024-53059\n\nCVE-2024-26885\n\nCVE-2024-27072\n\nCVE-2024-35965\n\nCVE-2024-41016\n\nCVE-2024-46854\n\nCVE-2024-46865\n\nCVE-2024-47684\n\nCVE-2024-47685\n\nCVE-2024-47692\n\nCVE-2024-47696\n\nCVE-2024-47697\n\nCVE-2024-47699\n\nCVE-2024-47701\n\nCVE-2024-47705\n\nCVE-2024-47706\n\nCVE-2024-47709\n\nCVE-2024-47710\n\nCVE-2024-47713\n\nCVE-2024-47718\n\nCVE-2024-47723\n\nCVE-2024-47735\n\nCVE-2024-47737\n\nCVE-2024-47747\n\nCVE-2024-49851\n\nCVE-2024-49889\n\nCVE-2024-49890\n\nCVE-2024-49892\n\nCVE-2024-49894\n\nCVE-2024-49900\n\nCVE-2024-49902\n\nCVE-2024-49903\n\nCVE-2024-49930\n\nCVE-2024-49938\n\nCVE-2024-49944\n\nCVE-2024-49948\n\nCVE-2024-49949\n\nCVE-2024-49952\n\nCVE-2024-49955\n\nCVE-2024-49973\n\nCVE-2024-49997\n\nCVE-2024-50001\n\nCVE-2024-50006\n\nCVE-2024-50008\n\nCVE-2024-50010\n\nCVE-2024-50015\n\nCVE-2024-50033\n\nCVE-2024-50035\n\nCVE-2024-50039\n\nCVE-2024-50040\n\nCVE-2024-50044\n\nCVE-2024-50045\n\nCVE-2024-50046\n\nCVE-2024-50058\n\nCVE-2024-50095\n\nCVE-2024-50127\n\nCVE-2024-50131\n\nCVE-2024-50134\n\nCVE-2024-50142\n\nCVE-2024-50148\n\nCVE-2024-50150\n\nCVE-2024-50151\n\nCVE-2024-50153\n\nCVE-2024-50188\n\nCVE-2024-50205\n\nCVE-2024-50210\n\nCVE-2022-38096\n\nCVE-2023-28746\n\nCVE-2023-47233\n\nCVE-2023-52458\n\nCVE-2023-52614\n\nCVE-2023-52620\n\nCVE-2024-23307\n\nCVE-2024-24857\n\nCVE-2024-24858\n\nCVE-2024-24859\n\nCVE-2024-25739\n\nCVE-2024-26642\n\nCVE-2024-26643\n\nCVE-2024-26810\n\nCVE-2024-26812\n\nCVE-2024-26920\n\nCVE-2024-26923\n\nCVE-2024-26925\n\nCVE-2024-26934\n\nCVE-2024-26935\n\nCVE-2024-26937\n\nCVE-2024-26950\n\nCVE-2024-26951\n\nCVE-2024-26958\n\nCVE-2024-26960\n\nCVE-2024-26961\n\nCVE-2024-26973\n\nCVE-2024-26974\n\nCVE-2024-26988\n\nCVE-2024-26993\n\nCVE-2024-27004\n\nCVE-2024-27013\n\nCVE-2024-27020\n\nCVE-2024-27059\n\nCVE-2024-27395\n\nCVE-2024-27396\n\nCVE-2024-27397\n\nCVE-2024-27437\n\nCVE-2024-35789\n\nCVE-2024-35805\n\nCVE-2024-35807\n\nCVE-2024-35811\n\nCVE-2024-35813\n\nCVE-2024-35815\n\nCVE-2024-35823\n\nCVE-2024-35849\n\nCVE-2024-35877\n\nCVE-2024-35884\n\nCVE-2024-35886\n\nCVE-2024-35888\n\nCVE-2024-35893\n\nCVE-2024-35895\n\nCVE-2024-35896\n\nCVE-2024-35897\n\nCVE-2024-35898\n\nCVE-2024-35899\n\nCVE-2024-35900\n\nCVE-2024-35905\n\nCVE-2024-35910\n\nCVE-2024-35915\n\nCVE-2024-35922\n\nCVE-2024-35925\n\nCVE-2024-35930\n\nCVE-2024-35933\n\nCVE-2024-35934\n\nCVE-2024-35935\n\nCVE-2024-35936\n\nCVE-2024-35940\n\nCVE-2024-35944\n\nCVE-2024-35950\n\nCVE-2024-35955\n\nCVE-2024-35958\n\nCVE-2024-35960\n\nCVE-2024-35962\n\nCVE-2024-35966\n\nCVE-2024-35967\n\nCVE-2024-35969\n\nCVE-2024-35973\n\nCVE-2024-35976\n\nCVE-2024-35978\n\nCVE-2024-35982\n\nCVE-2024-35983\n\nCVE-2024-35984\n\nCVE-2024-35988\n\nCVE-2024-35990\n\nCVE-2024-35996\n\nCVE-2024-35997\n\nCVE-2024-36004\n\nCVE-2024-36005\n\nCVE-2024-36006\n\nCVE-2024-36007\n\nCVE-2024-36008\n\nCVE-2024-36020\n\nCVE-2024-36899\n\nCVE-2024-38587\n\nCVE-2024-39493\n\nCVE-2024-40916\n\nCVE-2024-42114\n\nCVE-2024-42259\n\nCVE-2024-42265\n\nCVE-2024-42276\n\nCVE-2024-42281\n\nCVE-2024-42283\n\nCVE-2024-42292\n\nCVE-2024-42302\n\nCVE-2024-42304\n\nCVE-2024-42305\n\nCVE-2024-42306\n\nCVE-2024-42312\n\nCVE-2024-43828\n\nCVE-2024-43830\n\nCVE-2024-43834\n\nCVE-2024-43856\n\nCVE-2024-43858\n\nCVE-2024-43871\n\nCVE-2024-43879\n\nCVE-2024-43882\n\nCVE-2024-43889\n\nCVE-2024-43890\n\nCVE-2024-43893\n\nCVE-2024-44935\n\nCVE-2024-44944\n\nCVE-2024-44948\n\nCVE-2024-44960\n\nCVE-2024-47707\n\nCVE-2024-53124\n\nCVE-2024-56631\n\nCVE-2024-56672\n\nCVE-2024-57901\n\nCVE-2024-57902\n\nCVE-2024-57913\n\nCVE-2024-57929\n\nCVE-2024-57940\n\nCVE-2024-57948\n\nCVE-2024-57951\n\nCVE-2024-58016\n\nCVE-2024-58051\n\nCVE-2024-58085\n\nCVE-2024-41996\n\nCVE-2023-6237\n\nCVE-2023-6129\n\nCVE-2025-9230\n\nCVE-2023-50781\n\nCVE-2025-3198\n\nCVE-2025-5244\n\nCVE-2025-5245\n\nCVE-2025-7425\n\nCVE-2025-7545\n\nCVE-2025-7546\n\nCVE-2025-8224\n\nUpdate to V1.1.1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109827684/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem\n\nAll versions\n\naffected by\n\nmultiple CVEs\n\nCVE-2024-40945\n\nCVE-2025-21638\n\nCVE-2025-21639\n\nCVE-2025-21640\n\nCVE-2025-21648\n\nCVE-2025-21653\n\nCVE-2025-21664\n\nCVE-2025-21666\n\nCVE-2025-21669\n\nCVE-2025-21678\n\nCVE-2025-21683\n\nCVE-2025-21692\n\nCVE-2025-21694\n\nCVE-2024-26982\n\nCVE-2024-57977\n\nCVE-2024-57979\n\nCVE-2024-57981\n\nCVE-2024-57986\n\nCVE-2024-58005\n\nCVE-2024-58009\n\nCVE-2024-58014\n\nCVE-2024-58017\n\nCVE-2024-58020\n\nCVE-2024-58058\n\nCVE-2024-58063\n\nCVE-2024-58071\n\nCVE-2024-58072\n\nCVE-2025-21647\n\nCVE-2025-21704\n\nCVE-2025-21711\n\nCVE-2025-21719\n\nCVE-2025-21726\n\nCVE-2025-21727\n\nCVE-2025-21728\n\nCVE-2025-21735\n\nCVE-2025-21744\n\nCVE-2025-21745\n\nCVE-2025-21753\n\nCVE-2025-21756\n\nCVE-2025-21760\n\nCVE-2025-21761\n\nCVE-2025-21762\n\nCVE-2025-21763\n\nCVE-2025-21764\n\nCVE-2025-21765\n\nCVE-2025-21772\n\nCVE-2025-21776\n\nCVE-2025-21787\n\nCVE-2025-21795\n\nCVE-2025-21796\n\nCVE-2025-21806\n\nCVE-2025-21814\n\nCVE-2025-21826\n\nCVE-2025-21835\n\nCVE-2025-21844\n\nCVE-2025-21846\n\nCVE-2025-21858\n\nCVE-2025-21859\n\nCVE-2025-21862\n\nCVE-2025-21865\n\nCVE-2025-68160\n\nCVE-2025-69418\n\nCVE-2025-69419\n\nCVE-2025-69420\n\nCVE-2025-69421\n\nCVE-2026-22795\n\nCVE-2026-22796\n\nCVE-2026-28387\n\nCVE-2026-28388\n\nCVE-2026-28389\n\nCVE-2026-28390\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nMITIGATIONS\n\nSiemens has identified the following specific mitigations that customers can apply to reduce the risk:\n\nOnly build and run applications from trusted sources.\n\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nProduct-specific remediations or mitigations can be found in the section\nKnown Affected Products .\n\nPlease follow the General Security Recommendations .\n\nGENERAL SECURITY RECOMMENDATIONS\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security ), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\nPRODUCT DESCRIPTION\n\nSIMATIC S7-1500 TM MFP is a Technology module Multi functional platform for SIMATIC S7-1500 PLCs based on SIMATIC Industrial OS\n\nVULNERABILITY DESCRIPTION\n\nUn-/Collapse All\n\nThis chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory.\nWherever applicable, it also documents the product-specific impact of the individual vulnerabilities.\n\nVulnerability CVE-2021-4090\n\nAn out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.\n\nCVSS v3.1 Base Score\n5.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\n\nCWE\nCWE-787: Out-of-bounds Write\n\nVulnerability CVE-2021-38202\n\nfs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.\n\nCVSS v3.1 Base Score\n7.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\nCWE\nCWE-125: Out-of-bounds Read\n\nVulnerability CVE-2021-47002\n\nSUNRPC: null pointer dereference in svc_rqst_free(). When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page pointer will be dereferenced when calling put_page() in svc_rqst_free().\n\nCVSS v3.1 Base Score\n5.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\nCWE\nCWE-476: NULL Pointer Dereference\n\nVulnerability CVE-2021-47107\n\nNFSD: READDIR buffer overflow. If a client sends a READDIR count argument that is too small (say, zero), then the buffer size calculation in the new init_dirlist helper functions results in an underflow, allowing the XDR stream functions to write beyond the actual buffer. This calculation has always been suspect. NFSD has never sanity- checked the READDIR count argument, but the old entry encoders managed the problem correctly. With the commits below, entry encoding changed, exposing the underflow to the pointer arithmetic in xdr_reserve_space(). Modern NFS clients attempt to retrieve as much data as possible for each READDIR request.\n\nCVSS v3.1 Base Score\n6.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L\n\nCWE\nCWE-121: Stack-based Buffer Overflow\n\nVulnerability CVE-2021-47316\n\nnfsd: NULL dereference in nfs3svc_encode_getaclres.\n\nCVSS v3.1 Base Score\n5.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\nCWE\nCWE-20: Improper Input Validation\n\nVulnerability CVE-2022-38096\n\nA NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).\n\nCVSS v3.1 Base Score\n6.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H\n\nCWE\nCWE-476: NULL Pointer Dereference\n\nVulnerability CVE-2022-43945\n\nThe Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space.\n\nCVSS v3.1 Base Score\n6.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\nCWE\nCWE-131: Incorrect Calculation of Buffer Size\n\nVulnerability CVE-2022-48827\n\nNFSD: vulnerability caused by loff_t overflow on the server when a client reads near the maximum offset, causing the server to return an EINVAL error, which the client retries indefinitely, instead of handling out-of-range READ requests by returning a short result with an EOF flag.\n\nCVSS v3.1 Base Score\n6.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\n\nCWE\nCWE-125: Out-of-bounds Read\n\nVulnerability CVE-2022-48828\n\nNFSD: Vulnerability caused by an underflow in ia_size due to a mismatch between signed and unsigned 64-bit file size values, which can cause issues when handling large file sizes from NFS clients.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-20: Improper Input Validation\n\nVulnerability CVE-2022-48829\n\nNFSD: Vulnerability handling large file sizes for NFSv3 improperly capping client size values larger than s64_max, leading to unexpected behavior and potential data corruption.\n\nCVSS v3.1 Base Score\n7.1\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\nCWE\nCWE-253: Incorrect Check of Function Return Value\n\nVulnerability CVE-2023-1652\n\nA use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.\n\nCVSS v3.1 Base Score\n6.4\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-416: Use After Free\n\nVulnerability CVE-2023-5678\n\nIssue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters. Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q. An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate(). Also vulnerable are the OpenSSL pkey command line application when using the \"-pubcheck\" option, as well as the OpenSSL genpkey command line application. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.\n\nCVSS v3.1 Base Score\n5.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\n\nCWE\nCWE-606: Unchecked Input for Loop Condition\n\nVulnerability CVE-2023-6121\n\nAn out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).\n\nCVSS v3.1 Base Score\n4.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\n\nCWE\nCWE-125: Out-of-bounds Read\n\nVulnerability CVE-2023-6129\n\nThe POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions.\n\nIf an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for PowerPC CPUs restores the contents of vector registers in a different order than they are saved. Thus the contents of some of these vector registers are corrupted when returning to the caller. The vulnerable code is used only on newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However unless the compiler uses the vector registers for storing pointers, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the CHACHA20-POLY1305 AEAD (authenticated encryption with associated data) algorithm. The most common usage of this AEAD cipher is with TLS protocol versions 1.2 and 1.3. If this cipher is enabled on the server a malicious client can influence whether this AEAD cipher is used. This implies that TLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected by this issue therefore we consider this a Low severity security issue.\n\nCVSS v3.1 Base Score\n6.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H\n\nCWE\nCWE-787: Out-of-bounds Write\n\nVulnerability CVE-2023-6237\n\nChecking excessively long invalid RSA public keys may take a long time. Applications that use the function EVP_PKEY_public_check() to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may lead to a Denial of Service. When function EVP_PKEY_public_check() is called on RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is an overly large prime, then this computation would take a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function EVP_PKEY_public_check() is not called from other OpenSSL functions however it is called from the OpenSSL pkey command line application. For that reason that application is also vulnerable if used with the '-pubin' and '-check' options on untrusted data. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.\n\nCVSS v3.1 Base Score\n5.9\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\n\nCWE\nCWE-400: Uncontrolled Resource Consumption\n\nVulnerability CVE-2023-6817\n\nA use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.\n\nWe recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-416: Use After Free\n\nVulnerability CVE-2023-6931\n\nA heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.\n\nA perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().\n\nWe recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-787: Out-of-bounds Write\n\nVulnerability CVE-2023-6932\n\nA use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.\n\nA race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.\n\nWe recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-416: Use After Free\n\nVulnerability CVE-2023-28746\n\nInformation exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.\n\nCVSS v3.1 Base Score\n6.5\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N\n\nCWE\nCWE-1342: Information Exposure through Microarchitectural State after Transient Execution\n\nVulnerability CVE-2023-45898\n\nThe Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-20: Improper Input Validation\n\nVulnerability CVE-2023-47233\n\nThe brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this \"could be exploited in a real world scenario.\" This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.\n\nCVSS v3.1 Base Score\n4.3\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\nCWE\nCWE-416: Use After Free\n\nVulnerability CVE-2023-50781\n\nA flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.\n\nCVSS v3.1 Base Score\n7.5\n\nCVSS v3.1 Vector\n", "truncated": true, "representation": "html_text_excerpt", "relatedCve": "CVE-2026-31431", "relatedCves": [ "CVE-2023-5678", "CVE-2024-0727", "CVE-2023-6121", "CVE-2023-45898", "CVE-2023-6932", "CVE-2023-6931", "CVE-2023-6817", "CVE-2024-2511", "CVE-2024-5535", "CVE-2024-9143", "CVE-2024-36484", "CVE-2024-36902", "CVE-2024-36904", "CVE-2024-36905", "CVE-2024-36916", "CVE-2024-36929", "CVE-2024-36939", "CVE-2024-36940", "CVE-2024-36959", "CVE-2024-44987", "CVE-2024-44989", "CVE-2024-44990", "CVE-2024-45016", "CVE-2024-45018", "CVE-2024-46679", "CVE-2024-46743", "CVE-2024-46744", "CVE-2024-46745", "CVE-2024-46750", "CVE-2024-46759", "CVE-2024-46783", "CVE-2024-47660", "CVE-2024-50299", "CVE-2024-50301", "CVE-2024-53101", "CVE-2024-50302", "CVE-2023-52447", "CVE-2024-22099", "CVE-2024-26651", "CVE-2024-26659", "CVE-2024-26787", "CVE-2024-26816", "CVE-2024-26820", "CVE-2024-26851", "CVE-2024-26852", "CVE-2024-26855", "CVE-2024-26859", "CVE-2024-26861", "CVE-2024-26863", "CVE-2024-26870", "CVE-2024-26872", "CVE-2024-26875", "CVE-2024-26877", "CVE-2024-26878", "CVE-2024-26880", "CVE-2024-26882", "CVE-2024-26883", "CVE-2024-26884", "CVE-2024-26889", "CVE-2024-26891", "CVE-2024-26894", "CVE-2024-26895", "CVE-2024-26897", "CVE-2024-26898", "CVE-2024-26901", "CVE-2024-26903", "CVE-2024-26906", "CVE-2024-26907", "CVE-2024-27024", "CVE-2024-27025", "CVE-2024-27038", "CVE-2024-27047", "CVE-2024-27052", "CVE-2024-27053", "CVE-2024-27065", "CVE-2024-27076", "CVE-2024-27077", "CVE-2024-27078", "CVE-2024-27419", "CVE-2024-27431", "CVE-2024-27436", "CVE-2024-35828", "CVE-2024-35845", "CVE-2024-35902", "CVE-2024-40961", "CVE-2022-48829", "CVE-2024-40934", "CVE-2024-36286", "CVE-2021-47107", "CVE-2024-38619", "CVE-2024-33847", "CVE-2024-39509", "CVE-2022-48827", "CVE-2024-40941", "CVE-2024-38596", "CVE-2024-38599", "CVE-2024-38565", "CVE-2024-42093", "CVE-2024-42097", "CVE-2024-39502", "CVE-2024-40995", "CVE-2024-40942", "CVE-2024-40960", "CVE-2024-38598", "CVE-2024-41004", "CVE-2024-26629", "CVE-2024-41006", "CVE-2024-36489", "CVE-2024-41005", "CVE-2024-39468", "CVE-2024-40984", "CVE-2024-38567", "CVE-2024-39489", "CVE-2024-38662", "CVE-2021-47316", "CVE-2024-39482", "CVE-2024-38552", "CVE-2024-42094", "CVE-2024-40958", "CVE-2024-38780", "CVE-2024-36894", "CVE-2024-40912", "CVE-2024-40905", "CVE-2024-36974", "CVE-2024-40971", "CVE-2021-47002", "CVE-2024-38558", "CVE-2024-38659", "CVE-2024-36270", "CVE-2024-38612", "CVE-2024-41000", "CVE-2024-42070", "CVE-2024-38547", "CVE-2024-38578", "CVE-2024-42090", "CVE-2024-42082", "CVE-2024-37356", "CVE-2024-33621", "CVE-2024-38615", "CVE-2024-38381", "CVE-2024-42096", "CVE-2024-40959", "CVE-2024-38589", "CVE-2024-38579", "CVE-2024-38560", "CVE-2024-34027", "CVE-2022-48828", "CVE-2024-40978", "CVE-2024-40993", "CVE-2024-40980", "CVE-2024-39503", "CVE-2024-38635", "CVE-2024-36978", "CVE-2021-4090", "CVE-2024-23848", "CVE-2024-50121", "CVE-2023-1652", "CVE-2024-42272", "CVE-2024-36288", "CVE-2021-38202", "CVE-2024-49977", "CVE-2022-43945", "CVE-2024-38559", "CVE-2024-50251", "CVE-2024-50262", "CVE-2024-53042", "CVE-2024-53057", "CVE-2024-53059", "CVE-2024-26885", "CVE-2024-27072", "CVE-2024-35965", "CVE-2024-41016", "CVE-2024-46854", "CVE-2024-46865", "CVE-2024-47684", "CVE-2024-47685", "CVE-2024-47692", "CVE-2024-47696", "CVE-2024-47697", "CVE-2024-47699", "CVE-2024-47701", "CVE-2024-47705", "CVE-2024-47706", "CVE-2024-47709", "CVE-2024-47710", "CVE-2024-47713", "CVE-2024-47718", "CVE-2024-47723", "CVE-2024-47735", "CVE-2024-47737", "CVE-2024-47747", "CVE-2024-49851", "CVE-2024-49889", "CVE-2024-49890", "CVE-2024-49892", "CVE-2024-49894", "CVE-2024-49900", "CVE-2024-49902", "CVE-2024-49903", "CVE-2024-49930", "CVE-2024-49938", "CVE-2024-49944", "CVE-2024-49948", "CVE-2024-49949", "CVE-2024-49952", "CVE-2024-49955", "CVE-2024-49973", "CVE-2024-49997", "CVE-2024-50001", "CVE-2024-50006", "CVE-2024-50008", "CVE-2024-50010", "CVE-2024-50015", "CVE-2024-50033", "CVE-2024-50035", "CVE-2024-50039", "CVE-2024-50040", "CVE-2024-50044", "CVE-2024-50045", "CVE-2024-50046", "CVE-2024-50058", "CVE-2024-50095", "CVE-2024-50127", "CVE-2024-50131", "CVE-2024-50134", "CVE-2024-50142", "CVE-2024-50148", "CVE-2024-50150", "CVE-2024-50151", "CVE-2024-50153", "CVE-2024-50188", "CVE-2024-50205", "CVE-2024-50210", "CVE-2022-38096", "CVE-2023-28746", "CVE-2023-47233", "CVE-2023-52458", "CVE-2023-52614", "CVE-2023-52620", "CVE-2024-23307", "CVE-2024-24857", "CVE-2024-24858", "CVE-2024-24859", "CVE-2024-25739", "CVE-2024-26642", "CVE-2024-26643", "CVE-2024-26810", "CVE-2024-26812", "CVE-2024-26920", "CVE-2024-26923", "CVE-2024-26925", "CVE-2024-26934", "CVE-2024-26935", "CVE-2024-26937", "CVE-2024-26950", "CVE-2024-26951", "CVE-2024-26958", "CVE-2024-26960", "CVE-2024-26961", "CVE-2024-26973", "CVE-2024-26974", "CVE-2024-26988", "CVE-2024-26993", "CVE-2024-27004", "CVE-2024-27013", "CVE-2024-27020", "CVE-2024-27059", "CVE-2024-27395", "CVE-2024-27396", "CVE-2024-27397", "CVE-2024-27437", "CVE-2024-35789", "CVE-2024-35805", "CVE-2024-35807", "CVE-2024-35811", "CVE-2024-35813", "CVE-2024-35815", "CVE-2024-35823", "CVE-2024-35849", "CVE-2024-35877", "CVE-2024-35884", "CVE-2024-35886", "CVE-2024-35888", "CVE-2024-35893", "CVE-2024-35895", "CVE-2024-35896", "CVE-2024-35897", "CVE-2024-35898", "CVE-2024-35899", "CVE-2024-35900", "CVE-2024-35905", "CVE-2024-35910", "CVE-2024-35915", "CVE-2024-35922", "CVE-2024-35925", "CVE-2024-35930", "CVE-2024-35933", "CVE-2024-35934", "CVE-2024-35935", "CVE-2024-35936", "CVE-2024-35940", "CVE-2024-35944", "CVE-2024-35950", "CVE-2024-35955", "CVE-2024-35958", "CVE-2024-35960", "CVE-2024-35962", "CVE-2024-35966", "CVE-2024-35967", "CVE-2024-35969", "CVE-2024-35973", "CVE-2024-35976", "CVE-2024-35978", "CVE-2024-35982", "CVE-2024-35983", "CVE-2024-35984", "CVE-2024-35988", "CVE-2024-35990", "CVE-2024-35996", "CVE-2024-35997", "CVE-2024-36004", "CVE-2024-36005", "CVE-2024-36006", "CVE-2024-36007", "CVE-2024-36008", "CVE-2024-36020", "CVE-2024-36899", "CVE-2024-38587", "CVE-2024-39493", "CVE-2024-40916", "CVE-2024-42114", "CVE-2024-42259", "CVE-2024-42265", "CVE-2024-42276", "CVE-2024-42281", "CVE-2024-42283", "CVE-2024-42292", "CVE-2024-42302", "CVE-2024-42304", "CVE-2024-42305", "CVE-2024-42306", "CVE-2024-42312", "CVE-2024-43828", "CVE-2024-43830", "CVE-2024-43834", "CVE-2024-43856", "CVE-2024-43858", "CVE-2024-43871", "CVE-2024-43879", "CVE-2024-43882", "CVE-2024-43889", "CVE-2024-43890", "CVE-2024-43893", "CVE-2024-44935", "CVE-2024-44944", "CVE-2024-44948", "CVE-2024-44960", "CVE-2024-47707", "CVE-2024-53124", "CVE-2024-56631", "CVE-2024-56672", "CVE-2024-57901", "CVE-2024-57902", "CVE-2024-57913", "CVE-2024-57929", "CVE-2024-57940", "CVE-2024-57948", "CVE-2024-57951", "CVE-2024-58016", "CVE-2024-58051", "CVE-2024-58085", "CVE-2024-41996", "CVE-2023-6237", "CVE-2023-6129", "CVE-2025-9230", "CVE-2023-50781", "CVE-2025-3198", "CVE-2025-5244", "CVE-2025-5245", "CVE-2025-7425", "CVE-2025-7545", "CVE-2025-7546", "CVE-2025-8224", "CVE-2024-40945", "CVE-2025-21638", "CVE-2025-21639", "CVE-2025-21640", "CVE-2025-21648", "CVE-2025-21653", "CVE-2025-21664", "CVE-2025-21666", "CVE-2025-21669", "CVE-2025-21678", "CVE-2025-21683", "CVE-2025-21692", "CVE-2025-21694", "CVE-2024-26982", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58020", "CVE-2024-58058", "CVE-2024-58063", "CVE-2024-58071", "CVE-2024-58072", "CVE-2025-21647", "CVE-2025-21704", "CVE-2025-21711", "CVE-2025-21719", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21735", "CVE-2025-21744", "CVE-2025-21745", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21760", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21772", "CVE-2025-21776", "CVE-2025-21787", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21806", "CVE-2025-21814", "CVE-2025-21826", "CVE-2025-21835", "CVE-2025-21844", "CVE-2025-21846", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21865", "CVE-2025-68160", "CVE-2025-69418", "CVE-2025-69419", "CVE-2025-69420", "CVE-2025-69421", "CVE-2026-22795", "CVE-2026-22796", "CVE-2026-28387", "CVE-2026-28388", "CVE-2026-28389", "CVE-2026-28390", "CVE-2026-31431", "CVE-2023-3817", "CVE-2024-0584", "CVE-2024-47672" ] }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-328642.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-328642.html", "sourcePath": "body:advisory", "text": "SSA-328642\n\nSiemens Security Advisory by Siemens ProductCERT\n\nSSA-328642: \"Copy Fail\" Vulnerability in Multiple Industrial Products\n\nPublication Date:\n\n2026-09-08\n\nLast Update:\n\n2026-09-08\n\nCurrent Version:\n\nV1.0\n\nCVSS v3.1 Base Score:\n7.8\n\nSUMMARY\n\nMultiple Siemens products are vulnerable to the \"Copy Fail\" vulnerability.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.\n\nKNOWN AFFECTED PRODUCTS\n\nUn-/Collapse All\n\nAffected Product and Versions\nRemediation\n\nExpand children\n\nSIMATIC AX Runtime\n\nShow more details\n\nSIMATIC AX Runtime Core Linux Common Debian\n\nAll versions\n\naffected by\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC AX Runtime Core Linux Common Debian arm64\n\nAll versions\n\naffected by\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC AX Runtime Core Linux Platform Container Common Debian Development\n\nAll versions\n\naffected by\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC AX Runtime Core Linux VMWare Development\n\nAll versions\n\naffected by\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC CN 4100\n\nAll versions < V6.0\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V6.0 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC HMI Operator Device\n\nShow more details\n\nExpand children\n\nSIMATIC Advanced HMI Panel\n\nShow more details\n\nExpand children\n\nSIMATIC HMI Unified Comfort Panels family\n\nShow more details\n\nExpand children\n\nSIMATIC HMI Unified Comfort Panel PRO family\n\nShow more details\n\nSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC HMI Unified Comfort Panels Hygienic family\n\nShow more details\n\nSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC HMI Unified Comfort Panels Standard family\n\nShow more details\n\nSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIPLUS HMI Unified Comfort Panels Standard family\n\nShow more details\n\nSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIMATIC HMI Unified Basic Panels\n\nShow more details\n\nExpand children\n\nSIMATIC HMI Unified Basic Panels Standard family\n\nShow more details\n\nSIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nExpand children\n\nSIPLUS HMI Unified Basic Panels family\n\nShow more details\n\nSIPLUS HMI MTP400 Unified Basic (6AG1123-3DB32-2AW0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nSIPLUS HMI MTP700 Unified Basic (6AG1123-3GB32-2AW0)\n\nAll versions < V21 SP2 Update 1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 SP2 Update 1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nSIPLUS HMI MTP1000 Unified Basic (6AG1123-3KB32-2AW0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nSIPLUS HMI MTP1200 Unified Basic (6AG1123-3MB32-2AW0)\n\nAll versions < V21 Update 2 SR1\n\naffected by\n\nCVE-2026-31431\n\nUpdate to V21 Update 2 SR1 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109825897/\n\nSee further recommendations from section\nMitigations\n\nSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)\n\nAll versions\n\naffected by\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC IPC Industrial Edge Device OS (IED-OS)\n\nAll versions\n\naffected by\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nSIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0)\n\nAll versions\n\naffected by\n\nCVE-2026-31431\n\nCurrently no fix is available\n\nSee further recommendations from section\nMitigations\n\nMITIGATIONS\n\nSiemens has identified the following specific mitigations that customers can apply to reduce the risk:\n\nOnly build and run applications from trusted sources.\n\nLimit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.\n\nProduct-specific remediations or mitigations can be found in the section\nKnown Affected Products .\n\nPlease follow the General Security Recommendations .\n\nGENERAL SECURITY RECOMMENDATIONS\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security ), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\nPRODUCT DESCRIPTION\n\nIndustrial Edge represents an open, ready-to-use Edge computing platform consisting of Edge devices, Edge apps, Edge connectivity, and an application and device management infrastructure.\n\nSIMATIC HMI Panels are used for operator control and monitoring of machines and plants.\n\nSIMATIC IPC Industrial Edge devices are industrial PCs that are pre-configured with the Industrial Edge Device software.\n\nSIMATIC S7-1500 TM MFP is a Technology module Multi functional platform for SIMATIC S7-1500 PLCs based on SIMATIC Industrial OS\n\nSIPLUS HMI MTP1000, Unified Basic Panel, based on 6AV2123-3KB32-0AW0 with conformal coating -20 ...+50 °C touch operation 10\" widescreen TFT display, 16 million colors, PROFINET interface, configurable as of WinCC Unified Basic V18 Update 3, contains open-source software, which is provided free of charge see enclosed Blu-ray\n\nSIPLUS HMI MTP1200, Unified Basic Panel, based on 6AV2123-3MB32-0AW0 with conformal coating -20 ...+50 °C touch operation 12\" widescreen TFT display, 16 million colors, PROFINET interface, configurable as of WinCC Unified Basic V18 Update 3, contains open-source software, which is provided free of charge see enclosed Blu-ray\n\nSIPLUS HMI MTP400, Unified Basic Panel, based on 6AV2123-3DB32-0AW0 with conformal coating -20 ...+50 °C touch operation 4\" widescreen TFT display, 16 million colors, PROFINET interface, configurable as of WinCC Unified Basic V18 Update 3, contains open-source software, which is provided free of charge see enclosed Blu-ray\n\nSIPLUS HMI MTP700, Unified Basic Panel, based on 6AV2123-3GB32-0AW0 with conformal coating -20 ...+50 °C touch operation 7\" widescreen TFT displa", "truncated": true, "representation": "html_text_excerpt", "relatedCve": "CVE-2026-31431", "relatedCves": [ "CVE-2026-31431" ] } ], "limits": { "completeness": "bounded", "truncatedFields": [ "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://cert-portal.siemens.com/productcert/html/ssa-328642.html" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。", "excludedLinkedSources": [] }, "supplementarySources": [ { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "title": "SSA-019113", "relatedCves": [ "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31682", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-3497", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-46174", "CVE-2026-46333", "CVE-2023-53292", "CVE-2025-21863", "CVE-2025-40196", "CVE-2026-23255", "CVE-2026-23399", "CVE-2026-31449", "CVE-2026-31681", "CVE-2026-31700", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560", "CVE-2026-31431", "CVE-2026-43284", "CVE-2026-46300", "CVE-2025-38617" ] }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "title": "SSA-082556", "relatedCves": [ "CVE-2024-58005", "CVE-2023-52927", "CVE-2024-53166", "CVE-2025-21848", "CVE-2025-21712", "CVE-2025-21865", "CVE-2025-21862", "CVE-2025-21864", "CVE-2025-21756", "CVE-2025-21702", "CVE-2024-50246", "CVE-2024-57977", "CVE-2024-24855", "CVE-2024-26596", "CVE-2025-21701", "CVE-2025-21767", "CVE-2025-21728", "CVE-2025-21766", "CVE-2025-21795", "CVE-2025-21724", "CVE-2025-21765", "CVE-2024-57996", "CVE-2025-21796", "CVE-2025-21758", "CVE-2025-21745", "CVE-2023-4527", "CVE-2023-4806", "CVE-2023-4911", "CVE-2023-38545", "CVE-2023-38546", "CVE-2023-5363", "CVE-2023-44487", "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-48795", "CVE-2023-51384", "CVE-2023-51385", "CVE-2023-46218", "CVE-2023-46219", "CVE-2023-6246", "CVE-2023-6779", "CVE-2023-6780", "CVE-2024-28085", "CVE-2024-2961", "CVE-2024-33599", "CVE-2024-33600", "CVE-2024-33601", "CVE-2024-33602", "CVE-2024-34397", "CVE-2024-6387", "CVE-2024-37370", "CVE-2024-37371", "CVE-2024-6119", "CVE-2024-45490", "CVE-2024-45491", "CVE-2024-45492", "CVE-2024-12133", "CVE-2024-12243", "CVE-2025-26465", "CVE-2025-31115", "CVE-2025-46836", "CVE-2025-4598", "CVE-2025-4373", "CVE-2025-6395", "CVE-2025-32988", "CVE-2025-32989", "CVE-2025-3198", "CVE-2025-5244", "CVE-2025-5245", "CVE-2025-7425", "CVE-2025-7545", "CVE-2025-7546", "CVE-2025-8224", "CVE-2025-9230", "CVE-2025-9232", "CVE-2025-11082", "CVE-2025-11083", "CVE-2025-11412", "CVE-2025-11413", "CVE-2025-11414", "CVE-2025-11494", "CVE-2025-11495", "CVE-2025-11839", "CVE-2025-11840", "CVE-2025-39929", "CVE-2025-39931", "CVE-2025-39977", "CVE-2025-40022", "CVE-2025-59375", "CVE-2025-66382", "CVE-2024-57924", "CVE-2025-38614", "CVE-2025-38685", "CVE-2025-38691", "CVE-2025-38701", "CVE-2025-38702", "CVE-2025-38708", "CVE-2025-38721", "CVE-2025-38724", "CVE-2025-38727", "CVE-2025-39683", "CVE-2025-39689", "CVE-2025-39697", "CVE-2025-39724", "CVE-2025-39756", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39783", "CVE-2025-39787", "CVE-2025-39795", "CVE-2025-39798", "CVE-2025-39866", "CVE-2025-38058", "CVE-2025-38063", "CVE-2025-38067", "CVE-2025-38071", "CVE-2025-38079", "CVE-2025-38083", "CVE-2025-38100", "CVE-2025-38111", "CVE-2025-38124", "CVE-2025-38167", "CVE-2025-38198", "CVE-2025-38212", "CVE-2025-38214", "CVE-2025-38215", "CVE-2025-38222", "CVE-2025-38231", "CVE-2025-38236", "CVE-2025-38280", "CVE-2025-38285", "CVE-2025-38312", "CVE-2025-38342", "CVE-2025-38350", "CVE-2025-38364", "CVE-2025-38393", "CVE-2025-38400", "CVE-2025-38430", "CVE-2025-38451", "CVE-2025-38457", "CVE-2025-38465", "CVE-2025-38466", "CVE-2025-38468", "CVE-2025-38470", "CVE-2025-38471", "CVE-2025-38477", "CVE-2025-38498", "CVE-2025-38499", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49998", "CVE-2024-50298", "CVE-2024-56719", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-37945", "CVE-2025-37980", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38704", "CVE-2025-39748", "CVE-2025-39764", "CVE-2025-40135", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-68206", "CVE-2025-68265", "CVE-2025-71161", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-23100", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31431", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31682", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43284", "CVE-2026-46174", "CVE-2026-46300", "CVE-2026-32776", "CVE-2026-32777", "CVE-2026-32778", "CVE-2026-3904", "CVE-2026-4046", "CVE-2026-41080", "CVE-2026-4437", "CVE-2026-4438", "CVE-2026-45186", "CVE-2026-5435", "CVE-2026-5450", "CVE-2026-5928", "CVE-2026-6238", "CVE-2006-5051", "CVE-2025-38617", "CVE-2025-32990" ] }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "SSA-265688", "relatedCves": [ "CVE-2023-5678", "CVE-2024-0727", "CVE-2023-6121", "CVE-2023-45898", "CVE-2023-6932", "CVE-2023-6931", "CVE-2023-6817", "CVE-2024-2511", "CVE-2024-5535", "CVE-2024-9143", "CVE-2024-36484", "CVE-2024-36902", "CVE-2024-36904", "CVE-2024-36905", "CVE-2024-36916", "CVE-2024-36929", "CVE-2024-36939", "CVE-2024-36940", "CVE-2024-36959", "CVE-2024-44987", "CVE-2024-44989", "CVE-2024-44990", "CVE-2024-45016", "CVE-2024-45018", "CVE-2024-46679", "CVE-2024-46743", "CVE-2024-46744", "CVE-2024-46745", "CVE-2024-46750", "CVE-2024-46759", "CVE-2024-46783", "CVE-2024-47660", "CVE-2024-50299", "CVE-2024-50301", "CVE-2024-53101", "CVE-2024-50302", "CVE-2023-52447", "CVE-2024-22099", "CVE-2024-26651", "CVE-2024-26659", "CVE-2024-26787", "CVE-2024-26816", "CVE-2024-26820", "CVE-2024-26851", "CVE-2024-26852", "CVE-2024-26855", "CVE-2024-26859", "CVE-2024-26861", "CVE-2024-26863", "CVE-2024-26870", "CVE-2024-26872", "CVE-2024-26875", "CVE-2024-26877", "CVE-2024-26878", "CVE-2024-26880", "CVE-2024-26882", "CVE-2024-26883", "CVE-2024-26884", "CVE-2024-26889", "CVE-2024-26891", "CVE-2024-26894", "CVE-2024-26895", "CVE-2024-26897", "CVE-2024-26898", "CVE-2024-26901", "CVE-2024-26903", "CVE-2024-26906", "CVE-2024-26907", "CVE-2024-27024", "CVE-2024-27025", "CVE-2024-27038", "CVE-2024-27047", "CVE-2024-27052", "CVE-2024-27053", "CVE-2024-27065", "CVE-2024-27076", "CVE-2024-27077", "CVE-2024-27078", "CVE-2024-27419", "CVE-2024-27431", "CVE-2024-27436", "CVE-2024-35828", "CVE-2024-35845", "CVE-2024-35902", "CVE-2024-40961", "CVE-2022-48829", "CVE-2024-40934", "CVE-2024-36286", "CVE-2021-47107", "CVE-2024-38619", "CVE-2024-33847", "CVE-2024-39509", "CVE-2022-48827", "CVE-2024-40941", "CVE-2024-38596", "CVE-2024-38599", "CVE-2024-38565", "CVE-2024-42093", "CVE-2024-42097", "CVE-2024-39502", "CVE-2024-40995", "CVE-2024-40942", "CVE-2024-40960", "CVE-2024-38598", "CVE-2024-41004", "CVE-2024-26629", "CVE-2024-41006", "CVE-2024-36489", "CVE-2024-41005", "CVE-2024-39468", "CVE-2024-40984", "CVE-2024-38567", "CVE-2024-39489", "CVE-2024-38662", "CVE-2021-47316", "CVE-2024-39482", "CVE-2024-38552", "CVE-2024-42094", "CVE-2024-40958", "CVE-2024-38780", "CVE-2024-36894", "CVE-2024-40912", "CVE-2024-40905", "CVE-2024-36974", "CVE-2024-40971", "CVE-2021-47002", "CVE-2024-38558", "CVE-2024-38659", "CVE-2024-36270", "CVE-2024-38612", "CVE-2024-41000", "CVE-2024-42070", "CVE-2024-38547", "CVE-2024-38578", "CVE-2024-42090", "CVE-2024-42082", "CVE-2024-37356", "CVE-2024-33621", "CVE-2024-38615", "CVE-2024-38381", "CVE-2024-42096", "CVE-2024-40959", "CVE-2024-38589", "CVE-2024-38579", "CVE-2024-38560", "CVE-2024-34027", "CVE-2022-48828", "CVE-2024-40978", "CVE-2024-40993", "CVE-2024-40980", "CVE-2024-39503", "CVE-2024-38635", "CVE-2024-36978", "CVE-2021-4090", "CVE-2024-23848", "CVE-2024-50121", "CVE-2023-1652", "CVE-2024-42272", "CVE-2024-36288", "CVE-2021-38202", "CVE-2024-49977", "CVE-2022-43945", "CVE-2024-38559", "CVE-2024-50251", "CVE-2024-50262", "CVE-2024-53042", "CVE-2024-53057", "CVE-2024-53059", "CVE-2024-26885", "CVE-2024-27072", "CVE-2024-35965", "CVE-2024-41016", "CVE-2024-46854", "CVE-2024-46865", "CVE-2024-47684", "CVE-2024-47685", "CVE-2024-47692", "CVE-2024-47696", "CVE-2024-47697", "CVE-2024-47699", "CVE-2024-47701", "CVE-2024-47705", "CVE-2024-47706", "CVE-2024-47709", "CVE-2024-47710", "CVE-2024-47713", "CVE-2024-47718", "CVE-2024-47723", "CVE-2024-47735", "CVE-2024-47737", "CVE-2024-47747", "CVE-2024-49851", "CVE-2024-49889", "CVE-2024-49890", "CVE-2024-49892", "CVE-2024-49894", "CVE-2024-49900", "CVE-2024-49902", "CVE-2024-49903", "CVE-2024-49930", "CVE-2024-49938", "CVE-2024-49944", "CVE-2024-49948", "CVE-2024-49949", "CVE-2024-49952", "CVE-2024-49955", "CVE-2024-49973", "CVE-2024-49997", "CVE-2024-50001", "CVE-2024-50006", "CVE-2024-50008", "CVE-2024-50010", "CVE-2024-50015", "CVE-2024-50033", "CVE-2024-50035", "CVE-2024-50039", "CVE-2024-50040", "CVE-2024-50044", "CVE-2024-50045", "CVE-2024-50046", "CVE-2024-50058", "CVE-2024-50095", "CVE-2024-50127", "CVE-2024-50131", "CVE-2024-50134", "CVE-2024-50142", "CVE-2024-50148", "CVE-2024-50150", "CVE-2024-50151", "CVE-2024-50153", "CVE-2024-50188", "CVE-2024-50205", "CVE-2024-50210", "CVE-2022-38096", "CVE-2023-28746", "CVE-2023-47233", "CVE-2023-52458", "CVE-2023-52614", "CVE-2023-52620", "CVE-2024-23307", "CVE-2024-24857", "CVE-2024-24858", "CVE-2024-24859", "CVE-2024-25739", "CVE-2024-26642", "CVE-2024-26643", "CVE-2024-26810", "CVE-2024-26812", "CVE-2024-26920", "CVE-2024-26923", "CVE-2024-26925", "CVE-2024-26934", "CVE-2024-26935", "CVE-2024-26937", "CVE-2024-26950", "CVE-2024-26951", "CVE-2024-26958", "CVE-2024-26960", "CVE-2024-26961", "CVE-2024-26973", "CVE-2024-26974", "CVE-2024-26988", "CVE-2024-26993", "CVE-2024-27004", "CVE-2024-27013", "CVE-2024-27020", "CVE-2024-27059", "CVE-2024-27395", "CVE-2024-27396", "CVE-2024-27397", "CVE-2024-27437", "CVE-2024-35789", "CVE-2024-35805", "CVE-2024-35807", "CVE-2024-35811", "CVE-2024-35813", "CVE-2024-35815", "CVE-2024-35823", "CVE-2024-35849", "CVE-2024-35877", "CVE-2024-35884", "CVE-2024-35886", "CVE-2024-35888", "CVE-2024-35893", "CVE-2024-35895", "CVE-2024-35896", "CVE-2024-35897", "CVE-2024-35898", "CVE-2024-35899", "CVE-2024-35900", "CVE-2024-35905", "CVE-2024-35910", "CVE-2024-35915", "CVE-2024-35922", "CVE-2024-35925", "CVE-2024-35930", "CVE-2024-35933", "CVE-2024-35934", "CVE-2024-35935", "CVE-2024-35936", "CVE-2024-35940", "CVE-2024-35944", "CVE-2024-35950", "CVE-2024-35955", "CVE-2024-35958", "CVE-2024-35960", "CVE-2024-35962", "CVE-2024-35966", "CVE-2024-35967", "CVE-2024-35969", "CVE-2024-35973", "CVE-2024-35976", "CVE-2024-35978", "CVE-2024-35982", "CVE-2024-35983", "CVE-2024-35984", "CVE-2024-35988", "CVE-2024-35990", "CVE-2024-35996", "CVE-2024-35997", "CVE-2024-36004", "CVE-2024-36005", "CVE-2024-36006", "CVE-2024-36007", "CVE-2024-36008", "CVE-2024-36020", "CVE-2024-36899", "CVE-2024-38587", "CVE-2024-39493", "CVE-2024-40916", "CVE-2024-42114", "CVE-2024-42259", "CVE-2024-42265", "CVE-2024-42276", "CVE-2024-42281", "CVE-2024-42283", "CVE-2024-42292", "CVE-2024-42302", "CVE-2024-42304", "CVE-2024-42305", "CVE-2024-42306", "CVE-2024-42312", "CVE-2024-43828", "CVE-2024-43830", "CVE-2024-43834", "CVE-2024-43856", "CVE-2024-43858", "CVE-2024-43871", "CVE-2024-43879", "CVE-2024-43882", "CVE-2024-43889", "CVE-2024-43890", "CVE-2024-43893", "CVE-2024-44935", "CVE-2024-44944", "CVE-2024-44948", "CVE-2024-44960", "CVE-2024-47707", "CVE-2024-53124", "CVE-2024-56631", "CVE-2024-56672", "CVE-2024-57901", "CVE-2024-57902", "CVE-2024-57913", "CVE-2024-57929", "CVE-2024-57940", "CVE-2024-57948", "CVE-2024-57951", "CVE-2024-58016", "CVE-2024-58051", "CVE-2024-58085", "CVE-2024-41996", "CVE-2023-6237", "CVE-2023-6129", "CVE-2025-9230", "CVE-2023-50781", "CVE-2025-3198", "CVE-2025-5244", "CVE-2025-5245", "CVE-2025-7425", "CVE-2025-7545", "CVE-2025-7546", "CVE-2025-8224", "CVE-2024-40945", "CVE-2025-21638", "CVE-2025-21639", "CVE-2025-21640", "CVE-2025-21648", "CVE-2025-21653", "CVE-2025-21664", "CVE-2025-21666", "CVE-2025-21669", "CVE-2025-21678", "CVE-2025-21683", "CVE-2025-21692", "CVE-2025-21694", "CVE-2024-26982", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58020", "CVE-2024-58058", "CVE-2024-58063", "CVE-2024-58071", "CVE-2024-58072", "CVE-2025-21647", "CVE-2025-21704", "CVE-2025-21711", "CVE-2025-21719", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21735", "CVE-2025-21744", "CVE-2025-21745", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21760", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21772", "CVE-2025-21776", "CVE-2025-21787", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21806", "CVE-2025-21814", "CVE-2025-21826", "CVE-2025-21835", "CVE-2025-21844", "CVE-2025-21846", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21865", "CVE-2025-68160", "CVE-2025-69418", "CVE-2025-69419", "CVE-2025-69420", "CVE-2025-69421", "CVE-2026-22795", "CVE-2026-22796", "CVE-2026-28387", "CVE-2026-28388", "CVE-2026-28389", "CVE-2026-28390", "CVE-2026-31431", "CVE-2023-3817", "CVE-2024-0584", "CVE-2024-47672" ] }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-328642.html", "title": "SSA-328642", "relatedCves": [ "CVE-2026-31431" ] } ], "relatedDocuments": [ { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "title": "SSA-019113", "relatedCves": [ "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31682", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-3497", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-46174", "CVE-2026-46333", "CVE-2023-53292", "CVE-2025-21863", "CVE-2025-40196", "CVE-2026-23255", "CVE-2026-23399", "CVE-2026-31449", "CVE-2026-31681", "CVE-2026-31700", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560", "CVE-2026-31431", "CVE-2026-43284", "CVE-2026-46300", "CVE-2025-38617" ], "truncated": true }, { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "title": "SSA-082556", "relatedCves": [ "CVE-2024-58005", "CVE-2023-52927", "CVE-2024-53166", "CVE-2025-21848", "CVE-2025-21712", "CVE-2025-21865", "CVE-2025-21862", "CVE-2025-21864", "CVE-2025-21756", "CVE-2025-21702", "CVE-2024-50246", "CVE-2024-57977", "CVE-2024-24855", "CVE-2024-26596", "CVE-2025-21701", "CVE-2025-21767", "CVE-2025-21728", "CVE-2025-21766", "CVE-2025-21795", "CVE-2025-21724", "CVE-2025-21765", "CVE-2024-57996", "CVE-2025-21796", "CVE-2025-21758", "CVE-2025-21745", "CVE-2023-4527", "CVE-2023-4806", "CVE-2023-4911", "CVE-2023-38545", "CVE-2023-38546", "CVE-2023-5363", "CVE-2023-44487", "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-48795", "CVE-2023-51384", "CVE-2023-51385", "CVE-2023-46218", "CVE-2023-46219", "CVE-2023-6246", "CVE-2023-6779", "CVE-2023-6780", "CVE-2024-28085", "CVE-2024-2961", "CVE-2024-33599", "CVE-2024-33600", "CVE-2024-33601", "CVE-2024-33602", "CVE-2024-34397", "CVE-2024-6387", "CVE-2024-37370", "CVE-2024-37371", "CVE-2024-6119", "CVE-2024-45490", "CVE-2024-45491", "CVE-2024-45492", "CVE-2024-12133", "CVE-2024-12243", "CVE-2025-26465", "CVE-2025-31115", "CVE-2025-46836", "CVE-2025-4598", "CVE-2025-4373", "CVE-2025-6395", "CVE-2025-32988", "CVE-2025-32989", "CVE-2025-3198", "CVE-2025-5244", "CVE-2025-5245", "CVE-2025-7425", "CVE-2025-7545", "CVE-2025-7546", "CVE-2025-8224", "CVE-2025-9230", "CVE-2025-9232", "CVE-2025-11082", "CVE-2025-11083", "CVE-2025-11412", "CVE-2025-11413", "CVE-2025-11414", "CVE-2025-11494", "CVE-2025-11495", "CVE-2025-11839", "CVE-2025-11840", "CVE-2025-39929", "CVE-2025-39931", "CVE-2025-39977", "CVE-2025-40022", "CVE-2025-59375", "CVE-2025-66382", "CVE-2024-57924", "CVE-2025-38614", "CVE-2025-38685", "CVE-2025-38691", "CVE-2025-38701", "CVE-2025-38702", "CVE-2025-38708", "CVE-2025-38721", "CVE-2025-38724", "CVE-2025-38727", "CVE-2025-39683", "CVE-2025-39689", "CVE-2025-39697", "CVE-2025-39724", "CVE-2025-39756", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39783", "CVE-2025-39787", "CVE-2025-39795", "CVE-2025-39798", "CVE-2025-39866", "CVE-2025-38058", "CVE-2025-38063", "CVE-2025-38067", "CVE-2025-38071", "CVE-2025-38079", "CVE-2025-38083", "CVE-2025-38100", "CVE-2025-38111", "CVE-2025-38124", "CVE-2025-38167", "CVE-2025-38198", "CVE-2025-38212", "CVE-2025-38214", "CVE-2025-38215", "CVE-2025-38222", "CVE-2025-38231", "CVE-2025-38236", "CVE-2025-38280", "CVE-2025-38285", "CVE-2025-38312", "CVE-2025-38342", "CVE-2025-38350", "CVE-2025-38364", "CVE-2025-38393", "CVE-2025-38400", "CVE-2025-38430", "CVE-2025-38451", "CVE-2025-38457", "CVE-2025-38465", "CVE-2025-38466", "CVE-2025-38468", "CVE-2025-38470", "CVE-2025-38471", "CVE-2025-38477", "CVE-2025-38498", "CVE-2025-38499", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49998", "CVE-2024-50298", "CVE-2024-56719", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-37945", "CVE-2025-37980", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38704", "CVE-2025-39748", "CVE-2025-39764", "CVE-2025-40135", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-68206", "CVE-2025-68265", "CVE-2025-71161", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-23100", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31431", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31682", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43284", "CVE-2026-46174", "CVE-2026-46300", "CVE-2026-32776", "CVE-2026-32777", "CVE-2026-32778", "CVE-2026-3904", "CVE-2026-4046", "CVE-2026-41080", "CVE-2026-4437", "CVE-2026-4438", "CVE-2026-45186", "CVE-2026-5435", "CVE-2026-5450", "CVE-2026-5928", "CVE-2026-6238", "CVE-2006-5051", "CVE-2025-38617", "CVE-2025-32990" ], "truncated": true }, { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "SSA-265688", "relatedCves": [ "CVE-2023-5678", "CVE-2024-0727", "CVE-2023-6121", "CVE-2023-45898", "CVE-2023-6932", "CVE-2023-6931", "CVE-2023-6817", "CVE-2024-2511", "CVE-2024-5535", "CVE-2024-9143", "CVE-2024-36484", "CVE-2024-36902", "CVE-2024-36904", "CVE-2024-36905", "CVE-2024-36916", "CVE-2024-36929", "CVE-2024-36939", "CVE-2024-36940", "CVE-2024-36959", "CVE-2024-44987", "CVE-2024-44989", "CVE-2024-44990", "CVE-2024-45016", "CVE-2024-45018", "CVE-2024-46679", "CVE-2024-46743", "CVE-2024-46744", "CVE-2024-46745", "CVE-2024-46750", "CVE-2024-46759", "CVE-2024-46783", "CVE-2024-47660", "CVE-2024-50299", "CVE-2024-50301", "CVE-2024-53101", "CVE-2024-50302", "CVE-2023-52447", "CVE-2024-22099", "CVE-2024-26651", "CVE-2024-26659", "CVE-2024-26787", "CVE-2024-26816", "CVE-2024-26820", "CVE-2024-26851", "CVE-2024-26852", "CVE-2024-26855", "CVE-2024-26859", "CVE-2024-26861", "CVE-2024-26863", "CVE-2024-26870", "CVE-2024-26872", "CVE-2024-26875", "CVE-2024-26877", "CVE-2024-26878", "CVE-2024-26880", "CVE-2024-26882", "CVE-2024-26883", "CVE-2024-26884", "CVE-2024-26889", "CVE-2024-26891", "CVE-2024-26894", "CVE-2024-26895", "CVE-2024-26897", "CVE-2024-26898", "CVE-2024-26901", "CVE-2024-26903", "CVE-2024-26906", "CVE-2024-26907", "CVE-2024-27024", "CVE-2024-27025", "CVE-2024-27038", "CVE-2024-27047", "CVE-2024-27052", "CVE-2024-27053", "CVE-2024-27065", "CVE-2024-27076", "CVE-2024-27077", "CVE-2024-27078", "CVE-2024-27419", "CVE-2024-27431", "CVE-2024-27436", "CVE-2024-35828", "CVE-2024-35845", "CVE-2024-35902", "CVE-2024-40961", "CVE-2022-48829", "CVE-2024-40934", "CVE-2024-36286", "CVE-2021-47107", "CVE-2024-38619", "CVE-2024-33847", "CVE-2024-39509", "CVE-2022-48827", "CVE-2024-40941", "CVE-2024-38596", "CVE-2024-38599", "CVE-2024-38565", "CVE-2024-42093", "CVE-2024-42097", "CVE-2024-39502", "CVE-2024-40995", "CVE-2024-40942", "CVE-2024-40960", "CVE-2024-38598", "CVE-2024-41004", "CVE-2024-26629", "CVE-2024-41006", "CVE-2024-36489", "CVE-2024-41005", "CVE-2024-39468", "CVE-2024-40984", "CVE-2024-38567", "CVE-2024-39489", "CVE-2024-38662", "CVE-2021-47316", "CVE-2024-39482", "CVE-2024-38552", "CVE-2024-42094", "CVE-2024-40958", "CVE-2024-38780", "CVE-2024-36894", "CVE-2024-40912", "CVE-2024-40905", "CVE-2024-36974", "CVE-2024-40971", "CVE-2021-47002", "CVE-2024-38558", "CVE-2024-38659", "CVE-2024-36270", "CVE-2024-38612", "CVE-2024-41000", "CVE-2024-42070", "CVE-2024-38547", "CVE-2024-38578", "CVE-2024-42090", "CVE-2024-42082", "CVE-2024-37356", "CVE-2024-33621", "CVE-2024-38615", "CVE-2024-38381", "CVE-2024-42096", "CVE-2024-40959", "CVE-2024-38589", "CVE-2024-38579", "CVE-2024-38560", "CVE-2024-34027", "CVE-2022-48828", "CVE-2024-40978", "CVE-2024-40993", "CVE-2024-40980", "CVE-2024-39503", "CVE-2024-38635", "CVE-2024-36978", "CVE-2021-4090", "CVE-2024-23848", "CVE-2024-50121", "CVE-2023-1652", "CVE-2024-42272", "CVE-2024-36288", "CVE-2021-38202", "CVE-2024-49977", "CVE-2022-43945", "CVE-2024-38559", "CVE-2024-50251", "CVE-2024-50262", "CVE-2024-53042", "CVE-2024-53057", "CVE-2024-53059", "CVE-2024-26885", "CVE-2024-27072", "CVE-2024-35965", "CVE-2024-41016", "CVE-2024-46854", "CVE-2024-46865", "CVE-2024-47684", "CVE-2024-47685", "CVE-2024-47692", "CVE-2024-47696", "CVE-2024-47697", "CVE-2024-47699", "CVE-2024-47701", "CVE-2024-47705", "CVE-2024-47706", "CVE-2024-47709", "CVE-2024-47710", "CVE-2024-47713", "CVE-2024-47718", "CVE-2024-47723", "CVE-2024-47735", "CVE-2024-47737", "CVE-2024-47747", "CVE-2024-49851", "CVE-2024-49889", "CVE-2024-49890", "CVE-2024-49892", "CVE-2024-49894", "CVE-2024-49900", "CVE-2024-49902", "CVE-2024-49903", "CVE-2024-49930", "CVE-2024-49938", "CVE-2024-49944", "CVE-2024-49948", "CVE-2024-49949", "CVE-2024-49952", "CVE-2024-49955", "CVE-2024-49973", "CVE-2024-49997", "CVE-2024-50001", "CVE-2024-50006", "CVE-2024-50008", "CVE-2024-50010", "CVE-2024-50015", "CVE-2024-50033", "CVE-2024-50035", "CVE-2024-50039", "CVE-2024-50040", "CVE-2024-50044", "CVE-2024-50045", "CVE-2024-50046", "CVE-2024-50058", "CVE-2024-50095", "CVE-2024-50127", "CVE-2024-50131", "CVE-2024-50134", "CVE-2024-50142", "CVE-2024-50148", "CVE-2024-50150", "CVE-2024-50151", "CVE-2024-50153", "CVE-2024-50188", "CVE-2024-50205", "CVE-2024-50210", "CVE-2022-38096", "CVE-2023-28746", "CVE-2023-47233", "CVE-2023-52458", "CVE-2023-52614", "CVE-2023-52620", "CVE-2024-23307", "CVE-2024-24857", "CVE-2024-24858", "CVE-2024-24859", "CVE-2024-25739", "CVE-2024-26642", "CVE-2024-26643", "CVE-2024-26810", "CVE-2024-26812", "CVE-2024-26920", "CVE-2024-26923", "CVE-2024-26925", "CVE-2024-26934", "CVE-2024-26935", "CVE-2024-26937", "CVE-2024-26950", "CVE-2024-26951", "CVE-2024-26958", "CVE-2024-26960", "CVE-2024-26961", "CVE-2024-26973", "CVE-2024-26974", "CVE-2024-26988", "CVE-2024-26993", "CVE-2024-27004", "CVE-2024-27013", "CVE-2024-27020", "CVE-2024-27059", "CVE-2024-27395", "CVE-2024-27396", "CVE-2024-27397", "CVE-2024-27437", "CVE-2024-35789", "CVE-2024-35805", "CVE-2024-35807", "CVE-2024-35811", "CVE-2024-35813", "CVE-2024-35815", "CVE-2024-35823", "CVE-2024-35849", "CVE-2024-35877", "CVE-2024-35884", "CVE-2024-35886", "CVE-2024-35888", "CVE-2024-35893", "CVE-2024-35895", "CVE-2024-35896", "CVE-2024-35897", "CVE-2024-35898", "CVE-2024-35899", "CVE-2024-35900", "CVE-2024-35905", "CVE-2024-35910", "CVE-2024-35915", "CVE-2024-35922", "CVE-2024-35925", "CVE-2024-35930", "CVE-2024-35933", "CVE-2024-35934", "CVE-2024-35935", "CVE-2024-35936", "CVE-2024-35940", "CVE-2024-35944", "CVE-2024-35950", "CVE-2024-35955", "CVE-2024-35958", "CVE-2024-35960", "CVE-2024-35962", "CVE-2024-35966", "CVE-2024-35967", "CVE-2024-35969", "CVE-2024-35973", "CVE-2024-35976", "CVE-2024-35978", "CVE-2024-35982", "CVE-2024-35983", "CVE-2024-35984", "CVE-2024-35988", "CVE-2024-35990", "CVE-2024-35996", "CVE-2024-35997", "CVE-2024-36004", "CVE-2024-36005", "CVE-2024-36006", "CVE-2024-36007", "CVE-2024-36008", "CVE-2024-36020", "CVE-2024-36899", "CVE-2024-38587", "CVE-2024-39493", "CVE-2024-40916", "CVE-2024-42114", "CVE-2024-42259", "CVE-2024-42265", "CVE-2024-42276", "CVE-2024-42281", "CVE-2024-42283", "CVE-2024-42292", "CVE-2024-42302", "CVE-2024-42304", "CVE-2024-42305", "CVE-2024-42306", "CVE-2024-42312", "CVE-2024-43828", "CVE-2024-43830", "CVE-2024-43834", "CVE-2024-43856", "CVE-2024-43858", "CVE-2024-43871", "CVE-2024-43879", "CVE-2024-43882", "CVE-2024-43889", "CVE-2024-43890", "CVE-2024-43893", "CVE-2024-44935", "CVE-2024-44944", "CVE-2024-44948", "CVE-2024-44960", "CVE-2024-47707", "CVE-2024-53124", "CVE-2024-56631", "CVE-2024-56672", "CVE-2024-57901", "CVE-2024-57902", "CVE-2024-57913", "CVE-2024-57929", "CVE-2024-57940", "CVE-2024-57948", "CVE-2024-57951", "CVE-2024-58016", "CVE-2024-58051", "CVE-2024-58085", "CVE-2024-41996", "CVE-2023-6237", "CVE-2023-6129", "CVE-2025-9230", "CVE-2023-50781", "CVE-2025-3198", "CVE-2025-5244", "CVE-2025-5245", "CVE-2025-7425", "CVE-2025-7545", "CVE-2025-7546", "CVE-2025-8224", "CVE-2024-40945", "CVE-2025-21638", "CVE-2025-21639", "CVE-2025-21640", "CVE-2025-21648", "CVE-2025-21653", "CVE-2025-21664", "CVE-2025-21666", "CVE-2025-21669", "CVE-2025-21678", "CVE-2025-21683", "CVE-2025-21692", "CVE-2025-21694", "CVE-2024-26982", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58020", "CVE-2024-58058", "CVE-2024-58063", "CVE-2024-58071", "CVE-2024-58072", "CVE-2025-21647", "CVE-2025-21704", "CVE-2025-21711", "CVE-2025-21719", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21735", "CVE-2025-21744", "CVE-2025-21745", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21760", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21772", "CVE-2025-21776", "CVE-2025-21787", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21806", "CVE-2025-21814", "CVE-2025-21826", "CVE-2025-21835", "CVE-2025-21844", "CVE-2025-21846", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21865", "CVE-2025-68160", "CVE-2025-69418", "CVE-2025-69419", "CVE-2025-69420", "CVE-2025-69421", "CVE-2026-22795", "CVE-2026-22796", "CVE-2026-28387", "CVE-2026-28388", "CVE-2026-28389", "CVE-2026-28390", "CVE-2026-31431", "CVE-2023-3817", "CVE-2024-0584", "CVE-2024-47672" ], "truncated": true }, { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-328642.html", "title": "SSA-328642", "relatedCves": [ "CVE-2026-31431" ], "truncated": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T01:16:12.771Z", "fetchedAt": "2026-10-23T02:43:48.256Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-05-01T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Linuxに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "reviewed", "reviewedAt": "2026-10-23T03:59:01.000Z", "reviewState": "current", "summary": "Linuxの暗号処理に関係する問題です。CVE本文は修正内容の技術説明ですが、CISAはこの問題によって権限が昇格する可能性を示しています。Linux開発側の技術評価は端末内の低い権限を持つ攻撃者を想定しています。OS・機器の管理担当者に、このCVEの修正が適用されたカーネルか確認してもらってください。", "risk": "攻撃者が、本来与えられているより強い権限を得る可能性があります。CVE本文の修正説明に被害の平易な説明が少ないことは、「リスクがない」という意味ではありません。", "applicability": [ { "text": "関係するのはLinuxカーネルのalgif_aeadなどの暗号処理です。Linux開発側のCVSS評価はAV:L・PR:Lで、端末内で低い権限を持つ攻撃者を想定しています。攻撃者が最初から管理者権限を持つ必要があるという評価ではありません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json" ], "evidenceIds": [ "E1", "E2", "E4" ] }, { "text": "公式の版番号表はLinux 4.14を影響あり、4.14未満を影響なしとしています。影響なしの例外に指定されていない版の既定状態は影響ありです。単に「4.14だけが対象」とは読みません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json" ], "evidenceIds": [ "E3" ] }, { "text": "影響なしと明記された範囲は、5.10系の5.10.254以降、5.15系の5.15.204以降、6.1系の6.1.170以降、6.6系の6.6.137以降、6.12系の6.12.85以降、6.18系の6.18.22以降、6.19系の6.19.12以降です。それぞれ同じ系列内で照合してください。7.0以降も影響なしと記載されています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json" ], "evidenceIds": [ "E3" ] }, { "text": "Gitの対象表にある長い英数字は変更の識別子です。数値として比較せず、自作カーネルの場合は、担当者が該当の修正を変更履歴に取り込んでいるか確認します。配布パッケージの場合は、OSの配布元がこのCVEへ対応済みとする完全なパッケージ版で照合します。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json" ], "evidenceIds": [ "E2" ] }, { "text": "最初に「Linux」を使っているか、開発元・製品名・バージョンを確認します。同じカテゴリの製品を使っているだけでは、この問題の対象とは限りません。", "kind": "check", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-31431", "https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667", "https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c", "https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b", "https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc", "https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82", "https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8", "https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237", "https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431", "https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/", "https://xint.io/blog/copy-fail-linux-distributions#the-fix-6", "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/", "https://nvd.nist.gov/vuln/detail/CVE-2026-31431" ] } ], "versionChecks": [ { "text": "管理担当者に、Linuxの種類（Ubuntu、Red Hatなど）と版、対象パッケージ名、配布元を含む完全なパッケージ番号を確認してもらいます。OSの種類や製品の上流の番号だけで、影響の有無を決めないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "actions": [ { "text": "管理担当者に、使っているLinuxや機器の製品名、OSの系列、稼働中のカーネルの完全な版、導入済みのカーネルパッケージの版を確認してもらいます。配布元のCVE対応情報で、古い系列へ修正を戻し適用したパッケージ（バックポート）かも照合し、見た目の番号だけで安全・未修正を判断しないでください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json" ] }, { "text": "配布元が示す、このCVEへの修正または緩和策を適用してください。CISAは、利用できる緩和策がない場合には製品の使用中止を求めています。Linuxを組み込んだ専用機器は、機器メーカーの更新手順に沿って管理担当者に対応を依頼します。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431" ], "evidenceIds": [ "E6" ] }, { "text": "利用しているLinuxの配布元が示す、このCVEへの修正パッケージを管理者に適用してもらいます。Ubuntu Desktopでは「ソフトウェアの更新」から提供された更新を適用できます。サーバーや他の配布元では、それぞれの正規の更新手順に従います。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "temporaryMitigations": [], "verification": [ { "text": "導入したパッケージの版だけで終えず、再起動や配布元が指定した反映操作の後に、実際に稼働するカーネルの版も確認してもらいます。配布元のCVE対応情報、適用した版と日時、主要機能の動作確認結果を記録してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json" ] }, { "text": "修正後の完全なパッケージ番号と、その配布元のCVE対応表を照合します。古い番号のまま修正を取り込む場合があるため、数字が小さいという理由だけで未修正とは扱いません。管理者に必要な再起動の完了も確認してもらってください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "このページは利用中の端末・サーバー・機器を検査した結果ではありません。実際のOS、稼働カーネルと配布元の修正状況を照合してください。", "CISAの権限昇格の説明と、Linux開発側の対象表・技術評価を組み合わせています。取得した資料だけから、すべてのOS・構成で同じ攻撃結果になるとは判断しません。", "関連する機器メーカーの長い告知は一部だけを取得しています。専用機器の修正状況をLinuxの番号だけで判定せず、機種とファームウェア版を添えてメーカーに確認してください。" ], "supportRequest": "件名：CVE-2026-31431（Linux）の影響と対応状況の確認\n\n利用中のサイト・機器・サービス：[記入してください]\n製品名・開発元：[記入してください]\n現在のバージョン・ビルド番号：[不明なら「不明」と記入]\n\nCVE-2026-31431について、次を教えてください。\n1. この環境は対象ですか。対象外の場合は、版・設定・機能などの判断理由を教えてください。\n2. 対象の場合、修正を含む版・パッケージ番号と、更新方法を教えてください。古い版に修正を取り込んでいる場合は、このCVEへの対応状況を教えてください。\n3. いつ対応できますか。再起動・停止時間・事前のバックアップや確認作業は必要ですか。\n4. すぐ更新できない場合、正式な回避策とその限界・副作用を教えてください。利用を続けてよい条件も知りたいです。\n5. 対応完了後、修正を確認できる版・設定・対応日時を連絡してください。\n\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-31431", "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "label": "公式CVE：対象範囲・説明・技術評価" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-31431", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431", "label": "CISA公式の保存情報：影響と対応" }, { "url": "https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/", "label": "CISAが示す関連情報" }, { "url": "https://xint.io/blog/copy-fail-linux-distributions#the-fix-6", "label": "CISAが示す関連情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31431", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "reviewedSourceFingerprint": "reviewed-source-v1:a49ae6f9e53b8c5d50431307156fc2754e2ba69ed6c82914c1674c54ad6bd1cc", "reviewedSourceScope": "official_evidence", "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings. Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"unaffected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"crypto/af_alg.c\",\"crypto/algif_aead.c\",\"crypto/algif_skcipher.c\",\"include/crypto/if_alg.h\"],\"versions\":[{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"893d22e0135fa394db81df88697fba6032747667\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"19d43105a97be0810edbda875f2cd03f30dc130c\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"961cfa271a918ad4ae452420e7c303149002875b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"3115af9644c342b356f3f07a4dd1c8905cd9a6fc\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"8b88d99341f139e23bdeb1027a2a3ae10d341d82\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"ce42ee423e58dffa5ec03524054c9d8bfd4f6237\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"72548b093ee38a6d4f2a19e6ef1948ae05c181f7\",\"lessThan\":\"a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5\",\"status\":\"affected\",\"versionType\":\"git\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"affected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"crypto/af_alg.c\",\"crypto/algif_aead.c\",\"crypto/algif_skcipher.c\",\"include/crypto/if_alg.h\"],\"versions\":[{\"version\":\"4.14\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.14\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.10.254\",\"lessThanOrEqual\":\"5.10.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.15.204\",\"lessThanOrEqual\":\"5.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.1.170\",\"lessThanOrEqual\":\"6.1.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.6.137\",\"lessThanOrEqual\":\"6.6.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.12.85\",\"lessThanOrEqual\":\"6.12.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.18.22\",\"lessThanOrEqual\":\"6.18.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.19.12\",\"lessThanOrEqual\":\"6.19.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"status\":\"unaffected\",\"versionType\":\"original_commit_for_fix\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/31xxx/CVE-2026-31431.json", "sourceField": "/containers/cna/metrics/0/cvssV3_1", "excerpt": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431", "sourceField": "/originalText", "excerpt": "Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.", "language": "en", "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431", "sourceField": "/sourceAction", "excerpt": "\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "language": "en", "representation": "retained_feed_field" } ], "summaryEvidenceIds": [ "E1", "E4", "E5" ], "riskEvidenceIds": [ "E5" ], "glossary": [] } }, { "id": "CVE-2026-41940", "aliases": [], "title": "cPanel / WP Squared / WHM：認証の回避", "summary": "cPanel と WHM のバージョン 11.40 以降には、ログインフローに認証バイパスの脆弱性があり、認証されていないリモート攻撃者がコントロールパネルに不正にアクセスできる。", "risk": "認証されていないリモート攻撃者がコントロールパネルに不正にアクセスできる。", "product": "cPanel / WP Squared / WHM", "category": "wordpress", "component": "unknown", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "VulnCheck", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "cPanel", "range": ">= 11.40.0.0 / < 11.86.0.41" }, { "product": "cPanel", "range": ">= 11.88.0.0 / < 11.94.0.28" }, { "product": "cPanel", "range": ">= 11.96.0.0 / < 11.102.0.39" }, { "product": "cPanel", "range": ">= 11.104.0.0 / < 11.110.0.97" }, { "product": "cPanel", "range": ">= 11.112.0.0 / < 11.118.0.63" }, { "product": "cPanel", "range": ">= 11.120.0.0 / < 11.124.0.35" }, { "product": "cPanel", "range": ">= 11.126.0.0 / < 11.126.0.54" }, { "product": "cPanel", "range": ">= 11.128.0.0 / < 11.130.0.19" }, { "product": "cPanel", "range": ">= 11.132.0.0 / < 11.132.0.29" }, { "product": "cPanel", "range": ">= 11.134.0.0 / < 11.134.0.20" }, { "product": "cPanel", "range": ">= 11.136.0.0 / < 11.136.0.5" }, { "product": "cPanel", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "WP Squared", "range": "< 11.136.1.7" }, { "product": "WHM", "range": ">= 11.40.0.0 / < 11.86.0.41" }, { "product": "WHM", "range": ">= 11.88.0.0 / < 11.94.0.28" }, { "product": "WHM", "range": ">= 11.96.0.0 / < 11.102.0.39" }, { "product": "WHM", "range": ">= 11.104.0.0 / < 11.110.0.97" }, { "product": "WHM", "range": ">= 11.112.0.0 / < 11.118.0.63" }, { "product": "WHM", "range": ">= 11.120.0.0 / < 11.124.0.35" }, { "product": "WHM", "range": ">= 11.126.0.0 / < 11.126.0.54" }, { "product": "WHM", "range": ">= 11.128.0.0 / < 11.130.0.19" }, { "product": "WHM", "range": ">= 11.132.0.0 / < 11.132.0.29" }, { "product": "WHM", "range": ">= 11.134.0.0 / < 11.134.0.20" }, { "product": "WHM", "range": ">= 11.136.0.0 / < 11.136.0.5" }, { "product": "WHM", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41940", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41940", "label": "CVE公式レコード" }, { "url": "https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026", "label": "CISAが示す関連情報" }, { "url": "https://docs.cpanel.net/release-notes/release-notes", "label": "CVE掲載の参考情報" }, { "url": "https://docs.wpsquared.com/changelogs/versions/changelog/#13617", "label": "CISAが示す関連情報" }, { "url": "https://www.namecheap.com/status-updates/ongoing-critical-security-vulnerability-in-cpanel-april-28-2026", "label": "CVE掲載の参考情報" }, { "url": "https://www.vulncheck.com/advisories/cpanel-and-whm-authentication-bypass-via-login-flow", "label": "CVE掲載の参考情報" }, { "url": "https://docs.cpanel.net/release-notes/release-notes/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41940", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/appearance-themes-screen/", "label": "WordPress公式：テーマの確認" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-04-29T15:10:37.899Z", "modifiedAt": "2026-09-30T17:20:17.713Z", "fetchedAt": "2026-10-23T02:43:48.813Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.", "sourceTitle": "WebPros cPanel and WHM Authentication Bypass via Login Flow", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "vendor": "WebPros", "product": "cPanel", "versions": [ { "status": "affected", "version": "11.40.0.0", "versionType": "custom", "lessThan": "11.86.0.41" }, { "status": "affected", "version": "11.88.0.0", "versionType": "custom", "lessThan": "11.94.0.28" }, { "status": "affected", "version": "11.96.0.0", "versionType": "custom", "lessThan": "11.102.0.39" }, { "status": "affected", "version": "11.104.0.0", "versionType": "custom", "lessThan": "11.110.0.97" }, { "status": "affected", "version": "11.112.0.0", "versionType": "custom", "lessThan": "11.118.0.63" }, { "status": "affected", "version": "11.120.0.0", "versionType": "custom", "lessThan": "11.124.0.35" }, { "status": "affected", "version": "11.126.0.0", "versionType": "custom", "lessThan": "11.126.0.54" }, { "status": "affected", "version": "11.128.0.0", "versionType": "custom", "lessThan": "11.130.0.19" }, { "status": "affected", "version": "11.132.0.0", "versionType": "custom", "lessThan": "11.132.0.29" }, { "status": "affected", "version": "11.134.0.0", "versionType": "custom", "lessThan": "11.134.0.20" }, { "status": "affected", "version": "11.136.0.0", "versionType": "custom", "lessThan": "11.136.0.5" } ] }, { "defaultStatus": "unaffected", "vendor": "WebPros", "product": "WP Squared", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThan": "11.136.1.7" } ] }, { "defaultStatus": "affected", "vendor": "WebPros", "product": "WHM", "versions": [ { "status": "affected", "version": "11.40.0.0", "versionType": "custom", "lessThan": "11.86.0.41" }, { "status": "affected", "version": "11.88.0.0", "versionType": "custom", "lessThan": "11.94.0.28" }, { "status": "affected", "version": "11.96.0.0", "versionType": "custom", "lessThan": "11.102.0.39" }, { "status": "affected", "version": "11.104.0.0", "versionType": "custom", "lessThan": "11.110.0.97" }, { "status": "affected", "version": "11.112.0.0", "versionType": "custom", "lessThan": "11.118.0.63" }, { "status": "affected", "version": "11.120.0.0", "versionType": "custom", "lessThan": "11.124.0.35" }, { "status": "affected", "version": "11.126.0.0", "versionType": "custom", "lessThan": "11.126.0.54" }, { "status": "affected", "version": "11.128.0.0", "versionType": "custom", "lessThan": "11.130.0.19" }, { "status": "affected", "version": "11.132.0.0", "versionType": "custom", "lessThan": "11.132.0.29" }, { "status": "affected", "version": "11.134.0.0", "versionType": "custom", "lessThan": "11.134.0.20" }, { "status": "affected", "version": "11.136.0.0", "versionType": "custom", "lessThan": "11.136.0.5" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-41940", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "fetchedAt": "2026-10-23T02:43:48.813Z", "publishedAt": "2026-04-29T15:10:37.899Z", "modifiedAt": "2026-09-30T17:20:17.713Z", "state": "published", "provider": "VulnCheck", "title": "WebPros cPanel and WHM Authentication Bypass via Login Flow", "descriptions": [ { "lang": "en", "value": "cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "WebPros", "product": "cPanel", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "11.40.0.0", "lessThan": "11.86.0.41", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "11.88.0.0", "lessThan": "11.94.0.28", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "11.96.0.0", "lessThan": "11.102.0.39", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "11.104.0.0", "lessThan": "11.110.0.97", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "11.112.0.0", "lessThan": "11.118.0.63", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "11.120.0.0", "lessThan": "11.124.0.35", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "11.126.0.0", "lessThan": "11.126.0.54", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "11.128.0.0", "lessThan": "11.130.0.19", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "11.132.0.0", "lessThan": "11.132.0.29", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "11.134.0.0", "lessThan": "11.134.0.20", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "11.136.0.0", "lessThan": "11.136.0.5", "versionType": "custom", "status": "affected" } ] }, { "vendor": "WebPros", "product": "WP Squared", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "11.136.1.7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "WebPros", "product": "WHM", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "11.40.0.0", "lessThan": "11.86.0.41", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "11.88.0.0", "lessThan": "11.94.0.28", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/2", "version": "11.96.0.0", "lessThan": "11.102.0.39", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/3", "version": "11.104.0.0", "lessThan": "11.110.0.97", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/4", "version": "11.112.0.0", "lessThan": "11.118.0.63", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/5", "version": "11.120.0.0", "lessThan": "11.124.0.35", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/6", "version": "11.126.0.0", "lessThan": "11.126.0.54", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/7", "version": "11.128.0.0", "lessThan": "11.130.0.19", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/8", "version": "11.132.0.0", "lessThan": "11.132.0.29", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/9", "version": "11.134.0.0", "lessThan": "11.134.0.20", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/10", "version": "11.136.0.0", "lessThan": "11.136.0.5", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-306", "lang": "en", "description": "CWE-306 Missing Authentication for Critical Function", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026", "label": "VulnCheck", "tags": [ "vendor-advisory", "patch" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/0" }, { "url": "https://docs.cpanel.net/release-notes/release-notes", "label": "VulnCheck", "tags": [ "release-notes" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/1" }, { "url": "https://docs.wpsquared.com/changelogs/versions/changelog/#13617", "label": "VulnCheck", "tags": [ "release-notes" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.namecheap.com/status-updates/ongoing-critical-security-vulnerability-in-cpanel-april-28-2026", "label": "VulnCheck", "tags": [ "third-party-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.vulncheck.com/advisories/cpanel-and-whm-authentication-bypass-via-login-flow", "label": "VulnCheck", "tags": [ "third-party-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/4" }, { "url": "https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-41940", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.bleepingcomputer.com/news/security/critrical-cpanel-flaw-mass-exploited-in-sorry-ransomware-attacks/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"vendor\":\"WebPros\",\"product\":\"cPanel\",\"versions\":[{\"status\":\"affected\",\"version\":\"11.40.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.86.0.41\"},{\"status\":\"affected\",\"version\":\"11.88.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.94.0.28\"},{\"status\":\"affected\",\"version\":\"11.96.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.102.0.39\"},{\"status\":\"affected\",\"version\":\"11.104.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.110.0.97\"},{\"status\":\"affected\",\"version\":\"11.112.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.118.0.63\"},{\"status\":\"affected\",\"version\":\"11.120.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.124.0.35\"},{\"status\":\"affected\",\"version\":\"11.126.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.126.0.54\"},{\"status\":\"affected\",\"version\":\"11.128.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.130.0.19\"},{\"status\":\"affected\",\"version\":\"11.132.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.132.0.29\"},{\"status\":\"affected\",\"version\":\"11.134.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.134.0.20\"},{\"status\":\"affected\",\"version\":\"11.136.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.136.0.5\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"WebPros\",\"product\":\"WP Squared\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\",\"lessThan\":\"11.136.1.7\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"defaultStatus\":\"affected\",\"vendor\":\"WebPros\",\"product\":\"WHM\",\"versions\":[{\"status\":\"affected\",\"version\":\"11.40.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.86.0.41\"},{\"status\":\"affected\",\"version\":\"11.88.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.94.0.28\"},{\"status\":\"affected\",\"version\":\"11.96.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.102.0.39\"},{\"status\":\"affected\",\"version\":\"11.104.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.110.0.97\"},{\"status\":\"affected\",\"version\":\"11.112.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.118.0.63\"},{\"status\":\"affected\",\"version\":\"11.120.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.124.0.35\"},{\"status\":\"affected\",\"version\":\"11.126.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.126.0.54\"},{\"status\":\"affected\",\"version\":\"11.128.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.130.0.19\"},{\"status\":\"affected\",\"version\":\"11.132.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.132.0.29\"},{\"status\":\"affected\",\"version\":\"11.134.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.134.0.20\"},{\"status\":\"affected\",\"version\":\"11.136.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.136.0.5\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-306\",\"description\":\"CWE-306 Missing Authentication for Critical Function\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"version\":\"4.0\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.3,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"version\":\"3.1\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-30T17:20:17.713Z", "fetchedAt": "2026-10-23T02:43:48.813Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-30T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "cPanel / WP Squared / WHMに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:57.586Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e6ba11a4ce1510fa71380d9eabc6706bc79128f8fb69c72c8de603fc78441c8a", "sourceModifiedAt": "2026-09-30T17:20:17.713Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "cPanel と WHM のバージョン 11.40 以降には、ログインフローに認証バイパスの脆弱性があり、認証されていないリモート攻撃者がコントロールパネルに不正にアクセスできる。", "risk": "認証されていないリモート攻撃者がコントロールパネルに不正にアクセスできる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "cPanel のバージョン 11.40.0.0 以上で、バージョン 11.86.0.41 未満、11.88.0.0 以上で 11.94.0.28 未満、11.96.0.0 以上で 11.102.0.39 未満、11.104.0.0 以上で 11.110.0.97 未満、11.112.0.0 以上で 11.118.0.63 未満、11.120.0.0 以上で 11.124.0.35 未満、11.126.0.0 以上で 11.126.0.54 未満、11.128.0.0 以上で 11.130.0.19 未満、11.132.0.0 以上で 11.132.0.29 未満、11.134.0.0 以上で 11.134.0.20 未満、11.136.0.0 以上で 11.136.0.5 未満のバージョンが影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "WHM のバージョン 11.40.0.0 以上で、バージョン 11.86.0.41 未満、11.88.0.0 以上で 11.94.0.28 未満、11.96.0.0 以上で 11.102.0.39 未満、11.104.0.0 以上で 11.110.0.97 未満、11.112.0.0 以上で 11.118.0.63 未満、11.120.0.0 以上で 11.124.0.35 未満、11.126.0.0 以上で 11.126.0.54 未満、11.128.0.0 以上で 11.130.0.19 未満、11.132.0.0 以上で 11.132.0.29 未満、11.134.0.0 以上で 11.134.0.20 未満、11.136.0.0 以上で 11.136.0.5 未満のバージョンが影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "WP Squared はデフォルトで影響なしとされている（defaultStatus が \"unaffected\"）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "公式の対象表：WebPros / cPanel。影響ありとして記載：11.40.0.0以上、11.86.0.41未満。影響ありとして記載：11.88.0.0以上、11.94.0.28未満。影響ありとして記載：11.96.0.0以上、11.102.0.39未満。影響ありとして記載：11.104.0.0以上、11.110.0.97未満。影響ありとして記載：11.112.0.0以上、11.118.0.63未満。影響ありとして記載：11.120.0.0以上、11.124.0.35未満。影響ありとして記載：11.126.0.0以上、11.126.0.54未満。影響ありとして記載：11.128.0.0以上、11.130.0.19未満。影響ありとして記載：11.132.0.0以上、11.132.0.29未満。影響ありとして記載：11.134.0.0以上、11.134.0.20未満。影響ありとして記載：11.136.0.0以上、11.136.0.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：WebPros / WP Squared。影響ありとして記載：11.136.1.7未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：WebPros / WHM。影響ありとして記載：11.40.0.0以上、11.86.0.41未満。影響ありとして記載：11.88.0.0以上、11.94.0.28未満。影響ありとして記載：11.96.0.0以上、11.102.0.39未満。影響ありとして記載：11.104.0.0以上、11.110.0.97未満。影響ありとして記載：11.112.0.0以上、11.118.0.63未満。影響ありとして記載：11.120.0.0以上、11.124.0.35未満。影響ありとして記載：11.126.0.0以上、11.126.0.54未満。影響ありとして記載：11.128.0.0以上、11.130.0.19未満。影響ありとして記載：11.132.0.0以上、11.132.0.29未満。影響ありとして記載：11.134.0.0以上、11.134.0.20未満。影響ありとして記載：11.136.0.0以上、11.136.0.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41940" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E3" ] }, { "text": "「cPanel / WP Squared / WHM」が本体・プラグイン・テーマのどれかを確認します。管理画面の「プラグイン」と「外観」→「テーマ」で製品名・開発元を照合し、本体の番号は「ツール」→「サイトヘルス」→「情報」で確認してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://wordpress.org/documentation/article/appearance-themes-screen/", "https://wordpress.org/documentation/article/site-health-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-41940", "https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026", "https://docs.cpanel.net/release-notes/release-notes", "https://docs.wpsquared.com/changelogs/versions/changelog/#13617", "https://www.namecheap.com/status-updates/ongoing-critical-security-vulnerability-in-cpanel-april-28-2026", "https://www.vulncheck.com/advisories/cpanel-and-whm-authentication-bypass-via-login-flow", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41940", "https://docs.cpanel.net/release-notes/release-notes/", "https://nvd.nist.gov/vuln/detail/CVE-2026-41940" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41940", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41940", "label": "CVE公式レコード" }, { "url": "https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026", "label": "CISAが示す関連情報" }, { "url": "https://docs.cpanel.net/release-notes/release-notes", "label": "CVE掲載の参考情報" }, { "url": "https://docs.wpsquared.com/changelogs/versions/changelog/#13617", "label": "CISAが示す関連情報" }, { "url": "https://www.namecheap.com/status-updates/ongoing-critical-security-vulnerability-in-cpanel-april-28-2026", "label": "CVE掲載の参考情報" }, { "url": "https://www.vulncheck.com/advisories/cpanel-and-whm-authentication-bypass-via-login-flow", "label": "CVE掲載の参考情報" }, { "url": "https://docs.cpanel.net/release-notes/release-notes/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41940", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/appearance-themes-screen/", "label": "WordPress公式：テーマの確認" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourceField": "/containers/cna/title", "excerpt": "WebPros cPanel and WHM Authentication Bypass via Login Flow", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"vendor\":\"WebPros\",\"product\":\"cPanel\",\"versions\":[{\"status\":\"affected\",\"version\":\"11.40.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.86.0.41\"},{\"status\":\"affected\",\"version\":\"11.88.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.94.0.28\"},{\"status\":\"affected\",\"version\":\"11.96.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.102.0.39\"},{\"status\":\"affected\",\"version\":\"11.104.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.110.0.97\"},{\"status\":\"affected\",\"version\":\"11.112.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.118.0.63\"},{\"status\":\"affected\",\"version\":\"11.120.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.124.0.35\"},{\"status\":\"affected\",\"version\":\"11.126.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.126.0.54\"},{\"status\":\"affected\",\"version\":\"11.128.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.130.0.19\"},{\"status\":\"affected\",\"version\":\"11.132.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.132.0.29\"},{\"status\":\"affected\",\"version\":\"11.134.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.134.0.20\"},{\"status\":\"affected\",\"version\":\"11.136.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.136.0.5\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"defaultStatus\":\"affected\",\"vendor\":\"WebPros\",\"product\":\"WHM\",\"versions\":[{\"status\":\"affected\",\"version\":\"11.40.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.86.0.41\"},{\"status\":\"affected\",\"version\":\"11.88.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.94.0.28\"},{\"status\":\"affected\",\"version\":\"11.96.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.102.0.39\"},{\"status\":\"affected\",\"version\":\"11.104.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.110.0.97\"},{\"status\":\"affected\",\"version\":\"11.112.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.118.0.63\"},{\"status\":\"affected\",\"version\":\"11.120.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.124.0.35\"},{\"status\":\"affected\",\"version\":\"11.126.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.126.0.54\"},{\"status\":\"affected\",\"version\":\"11.128.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.130.0.19\"},{\"status\":\"affected\",\"version\":\"11.132.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.132.0.29\"},{\"status\":\"affected\",\"version\":\"11.134.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.134.0.20\"},{\"status\":\"affected\",\"version\":\"11.136.0.0\",\"versionType\":\"custom\",\"lessThan\":\"11.136.0.5\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41940.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"WebPros\",\"product\":\"WP Squared\",\"versions\":[{\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\",\"lessThan\":\"11.136.1.7\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41940", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-41940\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-41940（cPanel / WP Squared / WHM）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・cPanel のバージョン 11.40.0.0 以上で、バージョン 11.86.0.41 未満、11.88.0.0 以上で 11.94.0.28 未満、11.96.0.0 以上で 11.102.0.39 未満、11.104.0.0 以上で 11.110.0.97 未満、11.112.0.0 以上で 11.118.0.63 未満、11.120.0.0 以上で 11.124.0.35 未満、11.126.0.0 以上で 11.126.0.54 未満、11.128.0.0 以上で 11.130.0.19 未満、11.132.0.0 以上で 11.132.0.29 未満、11.134.0.0 以上で 11.134.0.20 未満、11.136.0.0 以上で 11.136.0.5 未満のバージョンが影響を受ける。\n・WHM のバージョン 11.40.0.0 以上で、バージョン 11.86.0.41 未満、11.88.0.0 以上で 11.94.0.28 未満、11.96.0.0 以上で 11.102.0.39 未満、11.104.0.0 以上で 11.110.0.97 未満、11.112.0.0 以上で 11.118.0.63 未満、11.120.0.0 以上で 11.124.0.35 未満、11.126.0.0 以上で 11.126.0.54 未満、11.128.0.0 以上で 11.130.0.19 未満、11.132.0.0 以上で 11.132.0.29 未満、11.134.0.0 以上で 11.134.0.20 未満、11.136.0.0 以上で 11.136.0.5 未満のバージョンが影響を受ける。\n・WP Squared はデフォルトで影響なしとされている（defaultStatus が \"unaffected\"）。\n・公式の対象表：WebPros / cPanel。影響ありとして記載：11.40.0.0以上、11.86.0.41未満。影響ありとして記載：11.88.0.0以上、11.94.0.28未満。影響ありとして記載：11.96.0.0以上、11.102.0.39未満。影響ありとして記載：11.104.0.0以上、11.110.0.97未満。影響ありとして記載：11.112.0.0以上、11.118.0.63未満。影響ありとして記載：11.120.0.0以上、11.124.0.35未満。影響ありとして記載：11.126.0.0以上、11.126.0.54未満。影響ありとして記載：11.128.0.0以上、11.130.0.19未満。影響ありとして記載：11.132.0.0以上、11.132.0.29未満。影響ありとして記載：11.134.0.0以上、11.134.0.20未満。影響ありとして記載：11.136.0.0以上、11.136.0.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：WebPros / WP Squared。影響ありとして記載：11.136.1.7未満の版。\n・公式の対象表：WebPros / WHM。影響ありとして記載：11.40.0.0以上、11.86.0.41未満。影響ありとして記載：11.88.0.0以上、11.94.0.28未満。影響ありとして記載：11.96.0.0以上、11.102.0.39未満。影響ありとして記載：11.104.0.0以上、11.110.0.97未満。影響ありとして記載：11.112.0.0以上、11.118.0.63未満。影響ありとして記載：11.120.0.0以上、11.124.0.35未満。影響ありとして記載：11.126.0.0以上、11.126.0.54未満。影響ありとして記載：11.128.0.0以上、11.130.0.19未満。影響ありとして記載：11.132.0.0以上、11.132.0.29未満。影響ありとして記載：11.134.0.0以上、11.134.0.20未満。影響ありとして記載：11.136.0.0以上、11.136.0.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-41940", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:57.586Z", "lastSuccess": "2026-10-23T03:23:57.586Z", "sourceCheckedAt": "2026-10-23T02:43:48.813Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-1708", "aliases": [], "title": "ScreenConnect：ファイルへの不正アクセス", "summary": "ConnectWise ScreenConnect のバージョン 23.9.7 以前は、パス・トラバーサルの脆弱性があり、攻撃者がリモートコードを実行したり、機密データや重要なシステムに直接影響を与える可能性があります。", "risk": "攻撃者がリモートコードを実行したり、機密データや重要なシステムに直接影響を与える可能性があります。", "product": "ScreenConnect", "category": "other", "component": "package", "severity": "high", "cvss": 8.4, "cvssVersion": "3.1", "cvssSource": "cisa-cg", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "affected": [ { "product": "ScreenConnect", "range": "<= 23.9.7 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 23.9.8から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-1708", "label": "CVE公式レコード" }, { "url": "https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8", "label": "CISAが示す関連情報" }, { "url": "https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1708", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-02-21T15:29:10.091Z", "modifiedAt": "2026-08-04T03:55:56.405Z", "fetchedAt": "2026-10-23T02:43:30.241Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.", "sourceTitle": "Improper limitation of a pathname to a restricted directory (“path traversal”)", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "ScreenConnect", "vendor": "ConnectWise", "versions": [ { "changes": [ { "at": "23.9.8", "status": "unaffected" } ], "lessThanOrEqual": "23.9.7 ", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-1708", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "fetchedAt": "2026-10-23T02:43:30.241Z", "publishedAt": "2024-02-21T15:29:10.091Z", "modifiedAt": "2026-08-04T03:55:56.405Z", "state": "published", "provider": "cisa-cg", "title": "Improper limitation of a pathname to a restricted directory (“path traversal”)", "descriptions": [ { "lang": "en", "value": "ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "ConnectWise", "product": "ScreenConnect", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "23.9.7", "versionType": "custom", "status": "affected", "changes": [ { "at": "23.9.8", "status": "unaffected" } ] } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1708", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"ScreenConnect\",\"vendor\":\"ConnectWise\",\"versions\":[{\"changes\":[{\"at\":\"23.9.8\",\"status\":\"unaffected\"}],\"lessThanOrEqual\":\"23.9.7 \",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.4,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"scope\":\"CHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:55:56.405Z", "fetchedAt": "2026-10-23T02:43:30.241Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-28T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "ScreenConnectにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:23:58.028Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9da5d17b20b4e2f6fea58f3797b97f78dfd9e62712df4ae37f113a97cbee74b2", "sourceModifiedAt": "2026-08-04T03:55:56.405Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ConnectWise ScreenConnect のバージョン 23.9.7 以前は、パス・トラバーサルの脆弱性があり、攻撃者がリモートコードを実行したり、機密データや重要なシステムに直接影響を与える可能性があります。", "risk": "攻撃者がリモートコードを実行したり、機密データや重要なシステムに直接影響を与える可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ScreenConnect のバージョンが 23.9.7 以下（23.9.8 以降は影響なし）である場合に適用されます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：ConnectWise / ScreenConnect。影響ありとして記載：23.9.7以下の版。途中の変更：23.9.8から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ScreenConnect」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-1708", "https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8", "https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708", "https://nvd.nist.gov/vuln/detail/CVE-2024-1708" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-1708", "https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8", "https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708", "https://nvd.nist.gov/vuln/detail/CVE-2024-1708" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-1708", "https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8", "https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708", "https://nvd.nist.gov/vuln/detail/CVE-2024-1708" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-1708", "label": "CVE公式レコード" }, { "url": "https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8", "label": "CISAが示す関連情報" }, { "url": "https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1708", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "sourceField": "/containers/cna/title", "excerpt": "Improper limitation of a pathname to a restricted directory (“path traversal”)", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1708.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"ScreenConnect\",\"vendor\":\"ConnectWise\",\"versions\":[{\"changes\":[{\"at\":\"23.9.8\",\"status\":\"unaffected\"}],\"lessThanOrEqual\":\"23.9.7 \",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1708", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-1708\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-1708（ScreenConnect）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ScreenConnect のバージョンが 23.9.7 以下（23.9.8 以降は影響なし）である場合に適用されます。\n・公式の対象表：ConnectWise / ScreenConnect。影響ありとして記載：23.9.7以下の版。途中の変更：23.9.8から影響なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-1708", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:23:58.028Z", "lastSuccess": "2026-10-23T03:23:58.028Z", "sourceCheckedAt": "2026-10-23T02:43:30.241Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-32202", "aliases": [], "title": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2：脆弱性情報", "summary": "Windows Shell の保護機構が失敗し、認可されていない攻撃者がネットワーク上でなりすましを行える脆弱性です。", "risk": "攻撃者がなりすましを行うことで、ユーザーを騙して偽の情報を表示させる可能性があります。", "product": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2", "category": "windows", "component": "package", "severity": "medium", "cvss": 4.3, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.9339（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.9020（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19044.0 / < 10.0.19044.7548（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.7548（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.7376（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.7376（環境: x64-based Systems）" }, { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.8875（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 Version 25H2", "range": ">= 10.0.26200.0 / < 10.0.26200.8875（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 26H1", "range": ">= 10.0.28000.0 / < 10.0.28000.2525（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2012", "range": ">= 6.2.9200.0 / < 6.2.9200.26226（環境: x64-based Systems）" }, { "product": "Windows Server 2012 (Server Core installation)", "range": ">= 6.2.9200.0 / < 6.2.9200.26226（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.23291（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.23291（環境: x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.9339（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.9339（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.9020（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.9020（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.5386（環境: x64-based Systems）" }, { "product": "Windows Server 2025", "range": ">= 10.0.26100.0 / < 10.0.26100.33158（環境: x64-based Systems）" }, { "product": "Windows Server 2025 (Server Core installation)", "range": ">= 10.0.26100.0 / < 10.0.26100.33158（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32202", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32202", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202", "label": "Windows Shell Spoofing Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32202", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32202", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2026-04-14T16:57:36.996Z", "modifiedAt": "2026-10-15T15:52:51.458Z", "fetchedAt": "2026-10-23T02:43:48.303Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Shell Spoofing Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9339", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19044.0", "lessThan": "10.0.19044.7548", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.7548", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.7376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.7376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.8875", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26200.0", "lessThan": "10.0.26200.8875", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.28000.0", "lessThan": "10.0.28000.2525", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.26226", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.26226", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.23291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.23291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9339", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.9339", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.9020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.5386", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.33158", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.33158", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-32202", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "fetchedAt": "2026-10-23T02:43:48.303Z", "publishedAt": "2026-04-14T16:57:36.996Z", "modifiedAt": "2026-10-15T15:52:51.458Z", "state": "published", "provider": "microsoft", "title": "Windows Shell Spoofing Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9339", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.19044.0", "lessThan": "10.0.19044.7548", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.7548", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.7376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.7376", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.8875", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.26200.0", "lessThan": "10.0.26200.8875", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 26H1", "sourcePath": "/containers/cna/affected/8", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.28000.0", "lessThan": "10.0.28000.2525", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "sourcePath": "/containers/cna/affected/9", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.26226", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.26226", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.23291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.23291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9339", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.9339", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.9020", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.5386", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.33158", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.33158", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-693", "lang": "en-US", "description": "CWE-693: Protection Mechanism Failure", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C", "baseScore": 4.3, "baseSeverity": "MEDIUM", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202", "label": "Windows Shell Spoofing Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32202", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2026-32202-detection-script-spoofing-vulnerability-in-windows-shell", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2026-32202-mitigation-script-spoofing-vulnerability-in-windows-shell", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9339\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7548\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7548\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.8875\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.8875\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.2525\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26226\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26226\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9339\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9339\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5386\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33158\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33158\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-693: Protection Mechanism Failure\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-693\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":4.3,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T15:52:51.458Z", "fetchedAt": "2026-10-23T02:43:48.303Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-28T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:48:22.525Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "86cebd0e9eb22f2b084d0456f74ae4919b0f2ebbeb73868bee845797f3f59fef", "sourceModifiedAt": "2026-10-15T15:52:51.458Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows Shell の保護機構が失敗し、認可されていない攻撃者がネットワーク上でなりすましを行える脆弱性です。", "risk": "攻撃者がなりすましを行うことで、ユーザーを騙して偽の情報を表示させる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Windows 10 Version 1607（32 ビットおよび x64 ビット）で、バージョン 10.0.14393.0 以上 10.0.14393.9339 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Windows 10 Version 1809（32 ビットおよび x64 ビット）で、バージョン 10.0.17763.0 以上 10.0.17763.9020 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Windows 10 Version 21H2（32 ビット、ARM64、x64）で、バージョン 10.0.19044.0 以上 10.0.19044.7548 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "Windows 10 Version 22H2（32 ビット、ARM64、x64）で、バージョン 10.0.19045.0 以上 10.0.19045.7548 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E6", "E2" ] }, { "text": "Windows 11 version 23H2（ARM64）で、バージョン 10.0.22631.0 以上 10.0.22631.7376 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E7", "E2" ] }, { "text": "Windows 11 Version 23H2（x64）で、バージョン 10.0.22631.0 以上 10.0.22631.7376 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E8", "E2" ] }, { "text": "Windows 11 Version 24H2（ARM64、x64）で、バージョン 10.0.26100.0 以上 10.0.26100.8875 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E9", "E2" ] }, { "text": "Windows 11 Version 25H2（ARM64、x64）で、バージョン 10.0.26200.0 以上 10.0.26200.8875 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E10", "E2" ] }, { "text": "Windows 11 version 26H1（ARM64、x64）で、バージョン 10.0.28000.0 以上 10.0.28000.2525 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E11", "E2" ] }, { "text": "Windows Server 2012（x64）で、バージョン 6.2.9200.0 以上 6.2.9200.26226 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E12", "E2" ] }, { "text": "Windows Server 2012 (Server Core インストール)（x64）で、バージョン 6.2.9200.0 以上 6.2.9200.26226 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E13", "E2" ] }, { "text": "Windows Server 2012 R2（x64）で、バージョン 6.3.9600.0 以上 6.3.9600.23291 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E14", "E2" ] }, { "text": "Windows Server 2012 R2 (Server Core インストール)（x64）で、バージョン 6.3.9600.0 以上 6.3.9600.23291 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E15", "E2" ] }, { "text": "Windows Server 2016（x64）で、バージョン 10.0.14393.0 以上 10.0.14393.9339 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E16", "E2" ] }, { "text": "Windows Server 2016 (Server Core インストール)（x64）で、バージョン 10.0.14393.0 以上 10.0.14393.9339 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E17", "E2" ] }, { "text": "Windows Server 2019（x64）で、バージョン 10.0.17763.0 以上 10.0.17763.9020 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E18", "E2" ] }, { "text": "Windows Server 2019 (Server Core インストール)（x64）で、バージョン 10.0.17763.0 以上 10.0.17763.9020 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E19", "E2" ] }, { "text": "Windows Server 2022（x64）で、バージョン 10.0.20348.0 以上 10.0.20348.5386 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E20", "E2" ] }, { "text": "Windows Server 2025（x64）で、バージョン 10.0.26100.0 以上 10.0.26100.33158 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E21", "E2" ] }, { "text": "Windows Server 2025 (Server Core インストール)（x64）で、バージョン 10.0.26100.0 以上 10.0.26100.33158 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E22", "E2" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9339未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.9020未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7548未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7548未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7376未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7376未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.8875未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.8875未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.2525未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.26226未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.26226未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.23291未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.23291未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9339未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9339未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.9020未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.9020未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5386未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.33158未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.33158未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E22" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32202" ], "evidenceIds": [ "E23" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2026-32202", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32202", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32202", "https://nvd.nist.gov/vuln/detail/CVE-2026-32202" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32202", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32202", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202", "label": "Windows Shell Spoofing Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32202", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32202", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Shell Spoofing Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9339\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.7548\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.7548\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.7376\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.8875\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.8875\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 26H1\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.28000.0\",\"lessThan\":\"10.0.28000.2525\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26226\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.26226\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.23291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9339\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.9339\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.9020\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.5386\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33158\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32202.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.33158\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32202", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-32202\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-32202（Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 / Windows Server 2）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 Version 1607（32 ビットおよび x64 ビット）で、バージョン 10.0.14393.0 以上 10.0.14393.9339 未満は影響を受けます。\n・Windows 10 Version 1809（32 ビットおよび x64 ビット）で、バージョン 10.0.17763.0 以上 10.0.17763.9020 未満は影響を受けます。\n・Windows 10 Version 21H2（32 ビット、ARM64、x64）で、バージョン 10.0.19044.0 以上 10.0.19044.7548 未満は影響を受けます。\n・Windows 10 Version 22H2（32 ビット、ARM64、x64）で、バージョン 10.0.19045.0 以上 10.0.19045.7548 未満は影響を受けます。\n・Windows 11 version 23H2（ARM64）で、バージョン 10.0.22631.0 以上 10.0.22631.7376 未満は影響を受けます。\n・Windows 11 Version 23H2（x64）で、バージョン 10.0.22631.0 以上 10.0.22631.7376 未満は影響を受けます。\n・Windows 11 Version 24H2（ARM64、x64）で、バージョン 10.0.26100.0 以上 10.0.26100.8875 未満は影響を受けます。\n・Windows 11 Version 25H2（ARM64、x64）で、バージョン 10.0.26200.0 以上 10.0.26200.8875 未満は影響を受けます。\n・Windows 11 version 26H1（ARM64、x64）で、バージョン 10.0.28000.0 以上 10.0.28000.2525 未満は影響を受けます。\n・Windows Server 2012（x64）で、バージョン 6.2.9200.0 以上 6.2.9200.26226 未満は影響を受けます。\n・Windows Server 2012 (Server Core インストール)（x64）で、バージョン 6.2.9200.0 以上 6.2.9200.26226 未満は影響を受けます。\n・Windows Server 2012 R2（x64）で、バージョン 6.3.9600.0 以上 6.3.9600.23291 未満は影響を受けます。\n・Windows Server 2012 R2 (Server Core インストール)（x64）で、バージョン 6.3.9600.0 以上 6.3.9600.23291 未満は影響を受けます。\n・Windows Server 2016（x64）で、バージョン 10.0.14393.0 以上 10.0.14393.9339 未満は影響を受けます。\n・Windows Server 2016 (Server Core インストール)（x64）で、バージョン 10.0.14393.0 以上 10.0.14393.9339 未満は影響を受けます。\n・Windows Server 2019（x64）で、バージョン 10.0.17763.0 以上 10.0.17763.9020 未満は影響を受けます。\n・Windows Server 2019 (Server Core インストール)（x64）で、バージョン 10.0.17763.0 以上 10.0.17763.9020 未満は影響を受けます。\n・Windows Server 2022（x64）で、バージョン 10.0.20348.0 以上 10.0.20348.5386 未満は影響を受けます。\n・Windows Server 2025（x64）で、バージョン 10.0.26100.0 以上 10.0.26100.33158 未満は影響を受けます。\n・Windows Server 2025 (Server Core インストール)（x64）で、バージョン 10.0.26100.0 以上 10.0.26100.33158 未満は影響を受けます。\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.9339未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.9020未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.7548未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.7548未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7376未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.7376未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.8875未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.8875未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 26H1。影響ありとして記載：10.0.28000.0以上、10.0.28000.2525未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.26226未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.26226未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.23291未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.23291未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.9339未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.9339未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.9020未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.9020未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.5386未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.33158未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.33158未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-32202", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:48:22.525Z", "lastSuccess": "2026-10-23T03:48:22.525Z", "sourceCheckedAt": "2026-10-23T02:43:48.303Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-57726", "aliases": [], "title": "n/a：脆弱性情報", "summary": "SimpleHelp リモートサポートソフトウェアのバージョン 5.5.7 以前に、権限の低い技術者が過剰な権限を持つ API キーを作成できる脆弱性があります。この API キーを使ってサーバー管理者ロールへ権限を昇格させることが可能です。", "risk": "過剰な権限を持つ API キーにより、攻撃者はサーバー管理者ロールへ権限を昇格させることができる。", "product": "SimpleHelp SimpleHelp", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-57726", "label": "CVE公式レコード" }, { "url": "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "label": "CVE掲載の参考情報" }, { "url": "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57726", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-01-15T00:00:00.000Z", "modifiedAt": "2026-08-04T03:56:05.499Z", "fetchedAt": "2026-10-23T02:43:34.013Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-57726", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "fetchedAt": "2026-10-23T02:43:34.013Z", "publishedAt": "2025-01-15T00:00:00.000Z", "modifiedAt": "2026-08-04T03:56:05.499Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-dragonforce", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57726", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":9.9,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:56:05.499Z", "fetchedAt": "2026-10-23T02:43:34.013Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-24T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:38:02.167Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "412333737382093a1499109b2c33ce93de220f436407bc4246c497dffe8a7f3d", "sourceModifiedAt": "2026-08-04T03:56:05.499Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "SimpleHelp リモートサポートソフトウェアのバージョン 5.5.7 以前に、権限の低い技術者が過剰な権限を持つ API キーを作成できる脆弱性があります。この API キーを使ってサーバー管理者ロールへ権限を昇格させることが可能です。", "risk": "過剰な権限を持つ API キーにより、攻撃者はサーバー管理者ロールへ権限を昇格させることができる。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "権限の低い技術者が API キーを作成できる環境で本脆弱性が存在します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は SimpleHelp バージョン 5.5.7 以前です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json" ], "evidenceIds": [ "E2" ] }, { "text": "「SimpleHelp SimpleHelp」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-57726", "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726", "https://nvd.nist.gov/vuln/detail/CVE-2024-57726" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-57726", "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726", "https://nvd.nist.gov/vuln/detail/CVE-2024-57726" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-57726", "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726", "https://nvd.nist.gov/vuln/detail/CVE-2024-57726" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-57726", "label": "CVE公式レコード" }, { "url": "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "label": "CVE掲載の参考情報" }, { "url": "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57726", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57726.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57726", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-57726\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-57726（SimpleHelp SimpleHelp）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・権限の低い技術者が API キーを作成できる環境で本脆弱性が存在します。\n・対象は SimpleHelp バージョン 5.5.7 以前です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-57726", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:38:02.167Z", "lastSuccess": "2026-10-23T03:38:02.167Z", "sourceCheckedAt": "2026-10-23T02:43:34.013Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-57728", "aliases": [], "title": "n/a：コード実行", "summary": "SimpleHelp リモートサポートソフトウェア（バージョン5.5.7以前）では、管理者ユーザーが細工した zip ファイル（zip slip）をアップロードすると、任意の場所に任意のファイルを配置できる脆弱性があります。", "risk": "この脆弱性を利用されると、SimpleHelp サーバーのユーザー権限で任意のコードを実行させられる可能性があります。", "product": "SimpleHelp SimpleHelp", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-57728", "label": "CVE公式レコード" }, { "url": "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "label": "CVE掲載の参考情報" }, { "url": "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57728", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-01-15T00:00:00.000Z", "modifiedAt": "2026-08-04T03:56:06.666Z", "fetchedAt": "2026-10-23T02:43:34.057Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-57728", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "fetchedAt": "2026-10-23T02:43:34.057Z", "publishedAt": "2025-01-15T00:00:00.000Z", "modifiedAt": "2026-08-04T03:56:06.666Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-dragonforce", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57728", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.2,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:56:06.666Z", "fetchedAt": "2026-10-23T02:43:34.057Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-24T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:38:05.828Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6ca7345201461bc235998cd0178cf00b8c65207207836b21bb97f344e7caa897", "sourceModifiedAt": "2026-08-04T03:56:06.666Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "SimpleHelp リモートサポートソフトウェア（バージョン5.5.7以前）では、管理者ユーザーが細工した zip ファイル（zip slip）をアップロードすると、任意の場所に任意のファイルを配置できる脆弱性があります。", "risk": "この脆弱性を利用されると、SimpleHelp サーバーのユーザー権限で任意のコードを実行させられる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json" ], "evidenceIds": [ "E2" ] }, { "text": "「SimpleHelp SimpleHelp」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-57728", "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728", "https://nvd.nist.gov/vuln/detail/CVE-2024-57728" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-57728", "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728", "https://nvd.nist.gov/vuln/detail/CVE-2024-57728" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-57728", "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728", "https://nvd.nist.gov/vuln/detail/CVE-2024-57728" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-57728", "label": "CVE公式レコード" }, { "url": "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "label": "CVE掲載の参考情報" }, { "url": "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57728", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/57xxx/CVE-2024-57728.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-57728\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-57728（SimpleHelp SimpleHelp）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-57728", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:38:05.828Z", "lastSuccess": "2026-10-23T03:38:05.828Z", "sourceCheckedAt": "2026-10-23T02:43:34.057Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-7399", "aliases": [], "title": "MagicINFO 9 Server：脆弱性情報", "summary": "Samsung の MagicINFO 9 Server のバージョン 21.1050 未満において、パス名の制限が不適切で、攻撃者がシステム権限で任意のファイルを書き込むことができる脆弱性です。", "risk": "攻撃者がシステム権限で任意のファイルを書き込めるため、システムが不正に改ざんされる可能性があります。", "product": "MagicINFO 9 Server", "category": "other", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "samsung.tv_appliance", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "MagicINFO 9 Server", "range": "< 21.1050（環境: Windows）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "label": "CVE：samsung.tv_appliance" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-7399", "label": "CVE公式レコード" }, { "url": "https://security.samsungtv.com/securityUpdates", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7399", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-08-09T04:43:29.828Z", "modifiedAt": "2026-10-01T18:08:41.503Z", "fetchedAt": "2026-10-23T02:43:34.243Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Windows" ], "product": "MagicINFO 9 Server", "vendor": "Samsung Electronics", "versions": [ { "lessThan": "21.1050", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "configurationNotes": "対象環境・機能: Windows。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-7399", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "fetchedAt": "2026-10-23T02:43:34.243Z", "publishedAt": "2024-08-09T04:43:29.828Z", "modifiedAt": "2026-10-01T18:08:41.503Z", "state": "published", "provider": "samsung.tv_appliance", "title": "", "descriptions": [ { "lang": "en", "value": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Samsung Electronics", "product": "MagicINFO 9 Server", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Windows" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "21.1050", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-434", "lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "samsung.tv_appliance", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://security.samsungtv.com/securityUpdates", "label": "samsung.tv_appliance", "tags": [ "vendor-advisory" ], "provider": "samsung.tv_appliance", "sourcePath": "/containers/cna/references/0" }, { "url": "https://arcticwolf.com/resources/blog-uk/arctic-wolf-observes-exploitation-of-path-traversal-vulnerability-in-samsung-magicinfo-9-server-cve-2024-7399/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7399", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"product\":\"MagicINFO 9 Server\",\"vendor\":\"Samsung Electronics\",\"versions\":[{\"lessThan\":\"21.1050\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-434\",\"description\":\"CWE-434 Unrestricted Upload of File with Dangerous Type\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-01T18:08:41.503Z", "fetchedAt": "2026-10-23T02:43:34.243Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-24T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "MagicINFO 9 Serverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:01.942Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "57f0ce0b6e96e2b433ae78c60a61c052e21327b668c26659abe7bb9e00f6c927", "sourceModifiedAt": "2026-10-01T18:08:41.503Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Samsung の MagicINFO 9 Server のバージョン 21.1050 未満において、パス名の制限が不適切で、攻撃者がシステム権限で任意のファイルを書き込むことができる脆弱性です。", "risk": "攻撃者がシステム権限で任意のファイルを書き込めるため、システムが不正に改ざんされる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Windows 上の MagicINFO 9 Server で、バージョンが 21.1050 未満の場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Samsung Electronics / MagicINFO 9 Server。影響ありとして記載：21.1050未満の版。対象の環境：Windows", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json" ], "evidenceIds": [ "E2" ] }, { "text": "「MagicINFO 9 Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-7399", "https://security.samsungtv.com/securityUpdates", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399", "https://nvd.nist.gov/vuln/detail/CVE-2024-7399" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-7399", "https://security.samsungtv.com/securityUpdates", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399", "https://nvd.nist.gov/vuln/detail/CVE-2024-7399" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-7399", "https://security.samsungtv.com/securityUpdates", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399", "https://nvd.nist.gov/vuln/detail/CVE-2024-7399" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "label": "CVE：samsung.tv_appliance" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-7399", "label": "CVE公式レコード" }, { "url": "https://security.samsungtv.com/securityUpdates", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7399", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/7xxx/CVE-2024-7399.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"product\":\"MagicINFO 9 Server\",\"vendor\":\"Samsung Electronics\",\"versions\":[{\"lessThan\":\"21.1050\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-7399", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-7399\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-7399（MagicINFO 9 Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 上の MagicINFO 9 Server で、バージョンが 21.1050 未満の場合に影響があります。\n・公式の対象表：Samsung Electronics / MagicINFO 9 Server。影響ありとして記載：21.1050未満の版。対象の環境：Windows\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-7399", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:01.942Z", "lastSuccess": "2026-10-23T03:24:01.942Z", "sourceCheckedAt": "2026-10-23T02:43:34.243Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-29635", "aliases": [], "title": "n/a：コード実行", "summary": "D-Link DIR-823X のファームウェア 240126 および 240802 にコマンドインジェクションの脆弱性があり、認可された攻撃者が /goform/set_prohibiting へ POST リクエストを送ることで任意のコマンドをリモートデバイス上で実行できる。", "risk": "認可された攻撃者が任意のコマンドを実行できるため、デバイスが不正に制御される可能性がある。", "product": "D-Link DIR-823X", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-29635", "label": "CVE公式レコード" }, { "url": "https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "label": "CVE掲載の参考情報" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29635", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-03-25T00:00:00.000Z", "modifiedAt": "2026-04-25T03:55:37.481Z", "fetchedAt": "2026-10-23T02:43:37.242Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-29635", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "fetchedAt": "2026-10-23T02:43:37.242Z", "publishedAt": "2025-03-25T00:00:00.000Z", "modifiedAt": "2026-04-25T03:55:37.481Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.akamai.com/blog/security-research/2026/apr/cve-2025-29635-mirai-campaign-targets-d-link-devices", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-29635", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.2,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-25T03:55:37.481Z", "fetchedAt": "2026-10-23T02:43:37.242Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-24T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:38:06.501Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ef309a2c0277cf3f236999d6c3ea0f8ec4f77ef8e28a18e4e48a20767d8b54f8", "sourceModifiedAt": "2026-04-25T03:55:37.481Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "D-Link DIR-823X のファームウェア 240126 および 240802 にコマンドインジェクションの脆弱性があり、認可された攻撃者が /goform/set_prohibiting へ POST リクエストを送ることで任意のコマンドをリモートデバイス上で実行できる。", "risk": "認可された攻撃者が任意のコマンドを実行できるため、デバイスが不正に制御される可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "影響を受ける製品は D-Link DIR-823X で、該当するファームウェアバージョンは 240126 と 240802 である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json" ], "evidenceIds": [ "E2" ] }, { "text": "「D-Link DIR-823X」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-29635", "https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469", "https://nvd.nist.gov/vuln/detail/CVE-2025-29635" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-29635", "https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469", "https://nvd.nist.gov/vuln/detail/CVE-2025-29635" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-29635", "https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469", "https://nvd.nist.gov/vuln/detail/CVE-2025-29635" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-29635", "label": "CVE公式レコード" }, { "url": "https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "label": "CVE掲載の参考情報" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29635", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/29xxx/CVE-2025-29635.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-29635", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-29635\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-29635（D-Link DIR-823X）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受ける製品は D-Link DIR-823X で、該当するファームウェアバージョンは 240126 と 240802 である。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-29635", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:38:06.501Z", "lastSuccess": "2026-10-23T03:38:06.501Z", "sourceCheckedAt": "2026-10-23T02:43:37.242Z", "errorCode": null }, "glossary": [ { "term": "POST", "meaning": "フォームなどのデータを、相手のサーバーへ送るための通信方法です。この言葉だけで、情報漏えいや設定変更が起きたと判断するものではありません。", "sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Methods/POST", "kind": "general_definition" } ] } }, { "id": "CVE-2026-39987", "aliases": [], "title": "marimo：コード実行", "summary": "marimoはリアクティブPythonノートブックです。0.23.0未満のバージョンでは、/terminal/ws エンドポイントが認証検証を行わないため、認証されていない攻撃者がフルPTYシェルを取得し、任意のシステムコマンドを実行できる事前認証なしリモートコード実行脆弱性が存在します。他のWebSocketエンドポイント（例：/ws）は正しくvalidate_auth()を呼び出して認証しますが、/terminal/ws は実行モードとプラットフォームのサポートのみを確認し、認証を完全にスキップしています。この脆弱性はバージョン0.23.0で修正されました。", "risk": "認証されていない攻撃者がフルPTYシェルを取得し、任意のシステムコマンドを実行できる可能性があります。", "product": "marimo", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "GitHub_M", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "marimo", "range": "< 0.23.0" } ], "fixed": [], "steps": [ "marimoをバージョン0.23.0以降にアップデートしてください。", "「CVE-2026-39987」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-39987", "label": "CVE公式レコード" }, { "url": "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "label": "CISAが示す関連情報" }, { "url": "https://github.com/marimo-team/marimo/pull/9098", "label": "https://github.com/marimo-team/marimo/pull/9098" }, { "url": "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "label": "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39987", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-09T17:16:55.639Z", "modifiedAt": "2026-04-24T03:55:20.777Z", "fetchedAt": "2026-10-23T02:43:48.755Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0.", "sourceTitle": "marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "marimo-team", "product": "marimo", "versions": [ { "version": "< 0.23.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-39987", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "fetchedAt": "2026-10-23T02:43:48.755Z", "publishedAt": "2026-04-09T17:16:55.639Z", "modifiedAt": "2026-04-24T03:55:20.777Z", "state": "published", "provider": "GitHub_M", "title": "marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass", "descriptions": [ { "lang": "en", "value": "marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "marimo-team", "product": "marimo", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< 0.23.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "label": "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/marimo-team/marimo/pull/9098", "label": "https://github.com/marimo-team/marimo/pull/9098", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "label": "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.sysdig.com/blog/marimo-oss-python-notebook-rce-from-disclosure-to-exploitation-in-under-10-hours", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-39987", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"marimo-team\",\"product\":\"marimo\",\"versions\":[{\"version\":\"< 0.23.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-306\",\"lang\":\"en\",\"description\":\"CWE-306: Missing Authentication for Critical Function\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-24T03:55:20.777Z", "fetchedAt": "2026-10-23T02:43:48.755Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-23T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "marimoにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:03.841Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e2d49ea2915f680d13864e98eb976c9b91e9e0a396430fa47ae0ca15fb973df5", "sourceModifiedAt": "2026-04-24T03:55:20.777Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "marimoはリアクティブPythonノートブックです。0.23.0未満のバージョンでは、/terminal/ws エンドポイントが認証検証を行わないため、認証されていない攻撃者がフルPTYシェルを取得し、任意のシステムコマンドを実行できる事前認証なしリモートコード実行脆弱性が存在します。他のWebSocketエンドポイント（例：/ws）は正しくvalidate_auth()を呼び出して認証しますが、/terminal/ws は実行モードとプラットフォームのサポートのみを確認し、認証を完全にスキップしています。この脆弱性はバージョン0.23.0で修正されました。", "risk": "認証されていない攻撃者がフルPTYシェルを取得し、任意のシステムコマンドを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "marimoのバージョンが0.23.0未満である場合に脆弱性が影響します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "/terminal/ws エンドポイントは認証検証を行わず、接続を受け入れます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：marimo-team / marimo。影響ありとして記載：< 0.23.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json" ], "evidenceIds": [ "E3" ] }, { "text": "「marimo」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-39987", "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "https://github.com/marimo-team/marimo/pull/9098", "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "https://nvd.nist.gov/vuln/detail/CVE-2026-39987" ] } ], "actions": [ { "text": "marimoをバージョン0.23.0以降にアップデートしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2026-39987」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-39987", "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "https://github.com/marimo-team/marimo/pull/9098", "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "https://nvd.nist.gov/vuln/detail/CVE-2026-39987" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-39987", "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "https://github.com/marimo-team/marimo/pull/9098", "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "https://nvd.nist.gov/vuln/detail/CVE-2026-39987" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-39987", "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "https://github.com/marimo-team/marimo/pull/9098", "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "https://nvd.nist.gov/vuln/detail/CVE-2026-39987" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-39987", "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "https://github.com/marimo-team/marimo/pull/9098", "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "https://nvd.nist.gov/vuln/detail/CVE-2026-39987" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-39987", "label": "CVE公式レコード" }, { "url": "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "label": "CISAが示す関連情報" }, { "url": "https://github.com/marimo-team/marimo/pull/9098", "label": "https://github.com/marimo-team/marimo/pull/9098" }, { "url": "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "label": "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39987", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "sourceField": "/containers/cna/title", "excerpt": "marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39987.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"marimo-team\",\"product\":\"marimo\",\"versions\":[{\"version\":\"< 0.23.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-39987", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-39987\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-39987（marimo）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・marimoのバージョンが0.23.0未満である場合に脆弱性が影響します。\n・/terminal/ws エンドポイントは認証検証を行わず、接続を受け入れます。\n・公式の対象表：marimo-team / marimo。影響ありとして記載：< 0.23.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-39987", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:03.841Z", "lastSuccess": "2026-10-23T03:24:03.841Z", "sourceCheckedAt": "2026-10-23T02:43:48.755Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-33825", "aliases": [], "title": "Microsoft Defender Antimalware Platform：権限の奪取", "summary": "Microsoft Defender のアクセス制御の粒度が不十分で、認可された攻撃者がローカルで権限を昇格できる。", "risk": "攻撃者がローカルで権限を昇格し、システム上でより高い権限で操作できる可能性がある。", "product": "Microsoft Defender Antimalware Platform", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "affected": [ { "product": "Microsoft Defender Antimalware Platform", "range": ">= 4.0.0.0 / < 4.18.26030.3011" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33825", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33825", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-14T16:57:49.361Z", "modifiedAt": "2026-10-15T15:53:00.964Z", "fetchedAt": "2026-10-23T02:43:48.404Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft Defender Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft Defender Antimalware Platform", "versions": [ { "version": "4.0.0.0", "lessThan": "4.18.26030.3011", "versionType": "custom", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-33825", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "fetchedAt": "2026-10-23T02:43:48.404Z", "publishedAt": "2026-04-14T16:57:49.361Z", "modifiedAt": "2026-10-15T15:53:00.964Z", "state": "published", "provider": "microsoft", "title": "Microsoft Defender Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft Defender Antimalware Platform", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "4.0.0.0", "lessThan": "4.18.26030.3011", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1220", "lang": "en-US", "description": "CWE-1220: Insufficient Granularity of Access Control", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825", "label": "Microsoft Defender Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.huntress.com/blog/nightmare-eclipse-intrusion", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33825", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Defender Antimalware Platform\",\"versions\":[{\"version\":\"4.0.0.0\",\"lessThan\":\"4.18.26030.3011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-1220: Insufficient Granularity of Access Control\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-1220\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T15:53:00.964Z", "fetchedAt": "2026-10-23T02:43:48.404Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-22T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft Defender Antimalware Platformに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:04.522Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "4d88156e7f66b88148763fd69d577b1aca0dbc42e5f9867bcbe3f8ed53d9f01f", "sourceModifiedAt": "2026-10-15T15:53:00.964Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Defender のアクセス制御の粒度が不十分で、認可された攻撃者がローカルで権限を昇格できる。", "risk": "攻撃者がローカルで権限を昇格し、システム上でより高い権限で操作できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Microsoft Defender Antimalware Platform のバージョン 4.0.0.0 以上 4.18.26030.3011 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：Microsoft / Microsoft Defender Antimalware Platform。影響ありとして記載：4.0.0.0以上、4.18.26030.3011未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft Defender Antimalware Platform」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33825", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825", "https://nvd.nist.gov/vuln/detail/CVE-2026-33825" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-33825", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825", "https://nvd.nist.gov/vuln/detail/CVE-2026-33825" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33825", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825", "https://nvd.nist.gov/vuln/detail/CVE-2026-33825" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33825", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33825", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft Defender Elevation of Privilege Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33825.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Defender Antimalware Platform\",\"versions\":[{\"version\":\"4.0.0.0\",\"lessThan\":\"4.18.26030.3011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33825", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-33825\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-33825（Microsoft Defender Antimalware Platform）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Defender Antimalware Platform のバージョン 4.0.0.0 以上 4.18.26030.3011 未満が影響を受ける。\n・公式の対象表：Microsoft / Microsoft Defender Antimalware Platform。影響ありとして記載：4.0.0.0以上、4.18.26030.3011未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-33825", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:04.522Z", "lastSuccess": "2026-10-23T03:24:04.522Z", "sourceCheckedAt": "2026-10-23T02:43:48.404Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-27351", "aliases": [], "title": "NG：脆弱性情報", "summary": "この脆弱性により、リモートの攻撃者は PaperCut NG 22.0.5 (Build 63914) に対して認証を行わずにシステムへアクセスできるようになります。問題は SecurityRequestFilter クラス内の認証アルゴリズムの実装不備に起因します。", "risk": "攻撃者が認証を回避できるため、システムへの不正アクセスが可能になります。", "product": "NG", "category": "other", "component": "package", "severity": "high", "cvss": 8.2, "cvssVersion": "3.0", "cvssSource": "zdi", "cvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "affected": [ { "product": "NG", "range": "22.0.5 (Build 63914)" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "label": "CVE：zdi" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-27351", "label": "CVE公式レコード" }, { "url": "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219", "label": "CISAが示す関連情報" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-232/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27351", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-04-20T00:00:00.000Z", "modifiedAt": "2026-10-01T18:09:39.306Z", "fetchedAt": "2026-10-23T02:43:26.097Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "PaperCut", "product": "NG", "versions": [ { "version": "22.0.5 (Build 63914)", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-27351", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "fetchedAt": "2026-10-23T02:43:26.097Z", "publishedAt": "2023-04-20T00:00:00.000Z", "modifiedAt": "2026-10-01T18:09:39.306Z", "state": "published", "provider": "zdi", "title": "", "descriptions": [ { "lang": "en", "value": "This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "PaperCut", "product": "NG", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "22.0.5 (Build 63914)", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-287", "lang": "en", "description": "CWE-287: Improper Authentication", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "baseScore": 8.2, "baseSeverity": "HIGH", "provider": "zdi", "sourcePath": "/containers/cna/metrics/0/cvssV3_0" } ], "references": [ { "url": "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-232/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27351", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"PaperCut\",\"product\":\"NG\",\"versions\":[{\"version\":\"22.0.5 (Build 63914)\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"lang\":\"en\",\"description\":\"CWE-287: Improper Authentication\",\"cweId\":\"CWE-287\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_0", "text": "{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-01T18:09:39.306Z", "fetchedAt": "2026-10-23T02:43:26.097Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "NGに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:05.106Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "541e089e9b68348aabac02dfe18cd68bf3d0d4440f390f517ba229f0da394101", "sourceModifiedAt": "2026-10-01T18:09:39.306Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "この脆弱性により、リモートの攻撃者は PaperCut NG 22.0.5 (Build 63914) に対して認証を行わずにシステムへアクセスできるようになります。問題は SecurityRequestFilter クラス内の認証アルゴリズムの実装不備に起因します。", "risk": "攻撃者が認証を回避できるため、システムへの不正アクセスが可能になります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "PaperCut NG のバージョン 22.0.5 (Build 63914) が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：PaperCut / NG。影響ありとして記載：22.0.5 (Build 63914)。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json" ], "evidenceIds": [ "E2" ] }, { "text": "「NG」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-27351", "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219", "https://www.zerodayinitiative.com/advisories/ZDI-23-232/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351", "https://nvd.nist.gov/vuln/detail/CVE-2023-27351" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-27351", "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219", "https://www.zerodayinitiative.com/advisories/ZDI-23-232/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351", "https://nvd.nist.gov/vuln/detail/CVE-2023-27351" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-27351", "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219", "https://www.zerodayinitiative.com/advisories/ZDI-23-232/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351", "https://nvd.nist.gov/vuln/detail/CVE-2023-27351" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "label": "CVE：zdi" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-27351", "label": "CVE公式レコード" }, { "url": "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219", "label": "CISAが示す関連情報" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-232/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27351", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/27xxx/CVE-2023-27351.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"PaperCut\",\"product\":\"NG\",\"versions\":[{\"version\":\"22.0.5 (Build 63914)\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-27351", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-27351\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-27351（NG）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・PaperCut NG のバージョン 22.0.5 (Build 63914) が影響を受けます。\n・公式の対象表：PaperCut / NG。影響ありとして記載：22.0.5 (Build 63914)。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-27351", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:05.106Z", "lastSuccess": "2026-10-23T03:24:05.106Z", "sourceCheckedAt": "2026-10-23T02:43:26.097Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-27199", "aliases": [], "title": "TeamCity：ファイルへの不正アクセス", "summary": "JetBrains TeamCity の 2023.11.4 より前のバージョンで、パス横断により限定的な管理者操作が可能だった。", "risk": "攻撃者が限定的な管理者操作を実行できる可能性がある。", "product": "TeamCity", "category": "other", "component": "package", "severity": "high", "cvss": 7.3, "cvssVersion": "3.1", "cvssSource": "JetBrains", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "affected": [ { "product": "TeamCity", "range": "< 2023.11.4" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "label": "CVE：JetBrains" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-27199", "label": "CVE公式レコード" }, { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CISAが示す関連情報" }, { "url": "https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive", "label": "CVE掲載の参考情報" }, { "url": "https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27199", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-03-04T17:21:40.081Z", "modifiedAt": "2026-04-21T03:55:31.232Z", "fetchedAt": "2026-10-23T02:43:31.174Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "JetBrains", "product": "TeamCity", "versions": [ { "version": "0", "status": "affected", "lessThan": "2023.11.4", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-27199", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "fetchedAt": "2026-10-23T02:43:31.174Z", "publishedAt": "2024-03-04T17:21:40.081Z", "modifiedAt": "2026-04-21T03:55:31.232Z", "state": "published", "provider": "JetBrains", "title": "", "descriptions": [ { "lang": "en", "value": "In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "JetBrains", "product": "TeamCity", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "2023.11.4", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-23", "lang": "en", "description": "CWE-23", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 7.3, "baseSeverity": "HIGH", "provider": "JetBrains", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.py", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27199", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"JetBrains\",\"product\":\"TeamCity\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2023.11.4\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-23\",\"cweId\":\"CWE-23\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-21T03:55:31.232Z", "fetchedAt": "2026-10-23T02:43:31.174Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "TeamCityにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:09.349Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2765c599def2962114c5bfa384bc82346599ac997a6db1dd9ba0f4844c0c9037", "sourceModifiedAt": "2026-04-21T03:55:31.232Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "JetBrains TeamCity の 2023.11.4 より前のバージョンで、パス横断により限定的な管理者操作が可能だった。", "risk": "攻撃者が限定的な管理者操作を実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "TeamCity のバージョンが 2023.11.4 未満のものは影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：JetBrains / TeamCity。影響ありとして記載：2023.11.4未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json" ], "evidenceIds": [ "E2" ] }, { "text": "「TeamCity」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-27199", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199", "https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2024-27199" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-27199", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199", "https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2024-27199" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-27199", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199", "https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2024-27199" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "label": "CVE：JetBrains" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-27199", "label": "CVE公式レコード" }, { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CISAが示す関連情報" }, { "url": "https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive", "label": "CVE掲載の参考情報" }, { "url": "https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27199", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27199.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"JetBrains\",\"product\":\"TeamCity\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2023.11.4\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27199", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-27199\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-27199（TeamCity）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・TeamCity のバージョンが 2023.11.4 未満のものは影響を受ける。\n・公式の対象表：JetBrains / TeamCity。影響ありとして記載：2023.11.4未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-27199", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:09.349Z", "lastSuccess": "2026-10-23T03:24:09.349Z", "sourceCheckedAt": "2026-10-23T02:43:31.174Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-2749", "aliases": [], "title": "Xperience：コード実行", "summary": "認証済みユーザーが Kentico Xperience の Staging Sync Server 機能を利用して、任意のデータを相対パスの場所にアップロードできるため、パストラバーサルと任意ファイルアップロードが可能になり、サーバー側で実行可能なコンテンツがアップロードされるとサーバーや機器に攻撃者の命令を実行させられる（リモートコード実行）という脆弱性です。影響はバージョン 13.0.178 までです。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "product": "Xperience", "category": "other", "component": "package", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "VulnCheck", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Xperience", "range": "<= 13.0.178（機能: Staging）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-2749", "label": "CVE公式レコード" }, { "url": "https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/", "label": "CVE掲載の参考情報" }, { "url": "https://devnet.kentico.com/download/hotfixes", "label": "CISAが示す関連情報" }, { "url": "https://www.vulncheck.com/advisories/kentico-xperience-staging-media-file-upload-authenticated-rce", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2749", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-03-24T18:18:07.228Z", "modifiedAt": "2026-04-21T03:55:36.051Z", "fetchedAt": "2026-10-23T02:43:37.066Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.", "sourceTitle": "Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "modules": [ "Staging" ], "product": "Xperience", "vendor": "Kentico", "versions": [ { "lessThanOrEqual": "13.0.178", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "configurationNotes": "対象環境・機能: Staging。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-2749", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "fetchedAt": "2026-10-23T02:43:37.066Z", "publishedAt": "2025-03-24T18:18:07.228Z", "modifiedAt": "2026-04-21T03:55:36.051Z", "state": "published", "provider": "VulnCheck", "title": "Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE", "descriptions": [ { "lang": "en", "value": "An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Kentico", "product": "Xperience", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [ "Staging" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "13.0.178", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-434", "lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/", "label": "VulnCheck", "tags": [ "technical-description", "exploit" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/0" }, { "url": "https://devnet.kentico.com/download/hotfixes", "label": "VulnCheck", "tags": [ "vendor-advisory", "patch" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.vulncheck.com/advisories/kentico-xperience-staging-media-file-upload-authenticated-rce", "label": "VulnCheck", "tags": [ "third-party-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2749", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"modules\":[\"Staging\"],\"product\":\"Xperience\",\"vendor\":\"Kentico\",\"versions\":[{\"lessThanOrEqual\":\"13.0.178\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-434\",\"description\":\"CWE-434 Unrestricted Upload of File with Dangerous Type\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-21T03:55:36.051Z", "fetchedAt": "2026-10-23T02:43:37.066Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Xperienceにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:09.705Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "d2208ca9ab03e95f99d3642e005897d9e674c46fcd8372d691e612761338fc2b", "sourceModifiedAt": "2026-04-21T03:55:36.051Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "認証済みユーザーが Kentico Xperience の Staging Sync Server 機能を利用して、任意のデータを相対パスの場所にアップロードできるため、パストラバーサルと任意ファイルアップロードが可能になり、サーバー側で実行可能なコンテンツがアップロードされるとサーバーや機器に攻撃者の命令を実行させられる（リモートコード実行）という脆弱性です。影響はバージョン 13.0.178 までです。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "認証済みユーザーが Staging Sync Server 機能を使用できる環境でこの脆弱性が存在します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "影響を受けるモジュールは Staging です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "バージョンが 13.0.178 以下（13.0.178 を含む）の Kentico Xperience が対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：Kentico / Xperience。影響ありとして記載：13.0.178以下の版。対象の機能：Staging", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Xperience」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-2749", "https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/", "https://devnet.kentico.com/download/hotfixes", "https://www.vulncheck.com/advisories/kentico-xperience-staging-media-file-upload-authenticated-rce", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749", "https://nvd.nist.gov/vuln/detail/CVE-2025-2749" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-2749", "https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/", "https://devnet.kentico.com/download/hotfixes", "https://www.vulncheck.com/advisories/kentico-xperience-staging-media-file-upload-authenticated-rce", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749", "https://nvd.nist.gov/vuln/detail/CVE-2025-2749" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-2749", "https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/", "https://devnet.kentico.com/download/hotfixes", "https://www.vulncheck.com/advisories/kentico-xperience-staging-media-file-upload-authenticated-rce", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749", "https://nvd.nist.gov/vuln/detail/CVE-2025-2749" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-2749", "label": "CVE公式レコード" }, { "url": "https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/", "label": "CVE掲載の参考情報" }, { "url": "https://devnet.kentico.com/download/hotfixes", "label": "CISAが示す関連情報" }, { "url": "https://www.vulncheck.com/advisories/kentico-xperience-staging-media-file-upload-authenticated-rce", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2749", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourceField": "/containers/cna/title", "excerpt": "Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2749.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"modules\":[\"Staging\"],\"product\":\"Xperience\",\"vendor\":\"Kentico\",\"versions\":[{\"lessThanOrEqual\":\"13.0.178\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-2749\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-2749（Xperience）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証済みユーザーが Staging Sync Server 機能を使用できる環境でこの脆弱性が存在します。\n・影響を受けるモジュールは Staging です。\n・バージョンが 13.0.178 以下（13.0.178 を含む）の Kentico Xperience が対象です。\n・公式の対象表：Kentico / Xperience。影響ありとして記載：13.0.178以下の版。対象の機能：Staging\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-2749", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:09.705Z", "lastSuccess": "2026-10-23T03:24:09.705Z", "sourceCheckedAt": "2026-10-23T02:43:37.066Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-32975", "aliases": [], "title": "n/a：認証の回避", "summary": "Quest KACE Systems Management Appliance (SMA) の 13.0.x（13.0.385 未満）、13.1.x（13.1.81 未満）、13.2.x（13.2.183 未満）、14.0.x（14.0.341 未満、Patch 5）、および 14.1.x（14.1.101 未満、Patch 4）に認証バイパスの脆弱性があり、攻撃者は有効な資格情報なしに正規ユーザーになりすますことができ、結果として管理者権限を完全に取得できる可能性があります。", "risk": "この脆弱性が悪用されると、攻撃者が管理者権限を取得し、システム全体を支配される恐れがあります。", "product": "Quest KACE Systems Management Appliance (SMA)", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-32975", "label": "CVE公式レコード" }, { "url": "https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978", "label": "CISAが示す関連情報" }, { "url": "https://seclists.org/fulldisclosure/2025/Jun/22", "label": "CVE掲載の参考情報" }, { "url": "https://seralys.com/research/CVE-2025-32975.txt", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32975", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-24T00:00:00.000Z", "modifiedAt": "2026-04-21T03:55:39.782Z", "fetchedAt": "2026-10-23T02:43:37.880Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-32975", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "fetchedAt": "2026-10-23T02:43:37.880Z", "publishedAt": "2025-06-24T00:00:00.000Z", "modifiedAt": "2026-04-21T03:55:39.782Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://seclists.org/fulldisclosure/2025/Jun/22", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://seralys.com/research/CVE-2025-32975.txt", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32975", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://seclists.org/fulldisclosure/2025/Jun/25", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":10,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-21T03:55:39.782Z", "fetchedAt": "2026-10-23T02:43:37.880Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:09.824Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "336ec34e9ebd834a62f0710f9c57c79668928643323774b3d3716dd98224d3a0", "sourceModifiedAt": "2026-04-21T03:55:39.782Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Quest KACE Systems Management Appliance (SMA) の 13.0.x（13.0.385 未満）、13.1.x（13.1.81 未満）、13.2.x（13.2.183 未満）、14.0.x（14.0.341 未満、Patch 5）、および 14.1.x（14.1.101 未満、Patch 4）に認証バイパスの脆弱性があり、攻撃者は有効な資格情報なしに正規ユーザーになりすますことができ、結果として管理者権限を完全に取得できる可能性があります。", "risk": "この脆弱性が悪用されると、攻撃者が管理者権限を取得し、システム全体を支配される恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Quest KACE SMA 13.0.x（バージョン 13.0.385 未満）に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E1" ] }, { "text": "Quest KACE SMA 13.1.x（バージョン 13.1.81 未満）に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E1" ] }, { "text": "Quest KACE SMA 13.2.x（バージョン 13.2.183 未満）に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E1" ] }, { "text": "Quest KACE SMA 14.0.x（バージョン 14.0.341 未満、Patch 5）に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E1" ] }, { "text": "Quest KACE SMA 14.1.x（バージョン 14.1.101 未満、Patch 4）に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E1" ] }, { "text": "脆弱性はシングルサインオン（SSO）認証処理の仕組みに存在します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Quest KACE Systems Management Appliance (SMA)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-32975", "https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978", "https://seclists.org/fulldisclosure/2025/Jun/22", "https://seralys.com/research/CVE-2025-32975.txt", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975", "https://nvd.nist.gov/vuln/detail/CVE-2025-32975" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-32975", "https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978", "https://seclists.org/fulldisclosure/2025/Jun/22", "https://seralys.com/research/CVE-2025-32975.txt", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975", "https://nvd.nist.gov/vuln/detail/CVE-2025-32975" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-32975", "https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978", "https://seclists.org/fulldisclosure/2025/Jun/22", "https://seralys.com/research/CVE-2025-32975.txt", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975", "https://nvd.nist.gov/vuln/detail/CVE-2025-32975" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-32975", "label": "CVE公式レコード" }, { "url": "https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978", "label": "CISAが示す関連情報" }, { "url": "https://seclists.org/fulldisclosure/2025/Jun/22", "label": "CVE掲載の参考情報" }, { "url": "https://seralys.com/research/CVE-2025-32975.txt", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32975", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32975.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32975", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-32975\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-32975（Quest KACE Systems Management Appliance (SMA)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Quest KACE SMA 13.0.x（バージョン 13.0.385 未満）に影響があります。\n・Quest KACE SMA 13.1.x（バージョン 13.1.81 未満）に影響があります。\n・Quest KACE SMA 13.2.x（バージョン 13.2.183 未満）に影響があります。\n・Quest KACE SMA 14.0.x（バージョン 14.0.341 未満、Patch 5）に影響があります。\n・Quest KACE SMA 14.1.x（バージョン 14.1.101 未満、Patch 4）に影響があります。\n・脆弱性はシングルサインオン（SSO）認証処理の仕組みに存在します。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-32975", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:09.824Z", "lastSuccess": "2026-10-23T03:24:09.824Z", "sourceCheckedAt": "2026-10-23T02:43:37.880Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-48700", "aliases": [], "title": "n/a：ブラウザー上での不正な処理", "summary": "Zimbra Collaboration (ZCS) 8.8.15、9.0、10.0、10.1 の Classic UI において、HTML コンテンツのサニタイズが不十分なため、特別に作成されたメールを閲覧すると、攻撃者が任意の JavaScript を実行できる XSS 脆弱性が存在します。", "risk": "この脆弱性により、ユーザーのセッション内でスクリプトが実行され、機密情報への不正アクセスが可能になる恐れがあります。", "product": "Synacor Zimbra Collaboration Suite (ZCS)", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-48700", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48700", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-23T00:00:00.000Z", "modifiedAt": "2026-04-21T03:55:38.511Z", "fetchedAt": "2026-10-23T02:43:38.805Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, specifically involving crafted tag structures and attribute values that include an @import directive and other script injection vectors. The vulnerability is triggered when a user views a crafted e-mail message in the Classic UI, requiring no additional user interaction.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-48700", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "fetchedAt": "2026-10-23T02:43:38.805Z", "publishedAt": "2025-06-23T00:00:00.000Z", "modifiedAt": "2026-04-21T03:55:38.511Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, specifically involving crafted tag structures and attribute values that include an @import directive and other script injection vectors. The vulnerability is triggered when a user views a crafted e-mail message in the Classic UI, requiring no additional user interaction.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48700", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, specifically involving crafted tag structures and attribute values that include an @import directive and other script injection vectors. The vulnerability is triggered when a user views a crafted e-mail message in the Classic UI, requiring no additional user interaction.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":6.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-21T03:55:38.511Z", "fetchedAt": "2026-10-23T02:43:38.805Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:10.372Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "78ce2db54eb0004dac43dd147f4f905c76554004d0f52000fc321b00ac2c836f", "sourceModifiedAt": "2026-04-21T03:55:38.511Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Zimbra Collaboration (ZCS) 8.8.15、9.0、10.0、10.1 の Classic UI において、HTML コンテンツのサニタイズが不十分なため、特別に作成されたメールを閲覧すると、攻撃者が任意の JavaScript を実行できる XSS 脆弱性が存在します。", "risk": "この脆弱性により、ユーザーのセッション内でスクリプトが実行され、機密情報への不正アクセスが可能になる恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象製品は Zimbra Collaboration Suite (ZCS) の Classic UI です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E1" ] }, { "text": "影響を受けるバージョンは 8.8.15、9.0、10.0、10.1 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E1" ] }, { "text": "脆弱性は、ユーザーが特別に作成されたメールメッセージを Classic UI で表示したときに発生します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E1" ] }, { "text": "この攻撃を実行するために、ユーザーは追加の操作を行う必要はありません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E1" ] }, { "text": "問題の根本は、HTML コンテンツのサニタイズが不十分であり、@import ディレクティブやその他のスクリプト注入ベクトルを含むタグ構造や属性値が処理されることです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Synacor Zimbra Collaboration Suite (ZCS)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-48700", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700", "https://nvd.nist.gov/vuln/detail/CVE-2025-48700" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-48700", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700", "https://nvd.nist.gov/vuln/detail/CVE-2025-48700" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-48700", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700", "https://nvd.nist.gov/vuln/detail/CVE-2025-48700" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-48700", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48700", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, specifically involving crafted tag structures and attribute values that include an @import directive and other script injection vectors. The vulnerability is triggered when a user views a crafted e-mail message in the Classic UI, requiring no additional user interaction.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48700.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48700", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-48700\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-48700（Synacor Zimbra Collaboration Suite (ZCS)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は Zimbra Collaboration Suite (ZCS) の Classic UI です。\n・影響を受けるバージョンは 8.8.15、9.0、10.0、10.1 です。\n・脆弱性は、ユーザーが特別に作成されたメールメッセージを Classic UI で表示したときに発生します。\n・この攻撃を実行するために、ユーザーは追加の操作を行う必要はありません。\n・問題の根本は、HTML コンテンツのサニタイズが不十分であり、@import ディレクティブやその他のスクリプト注入ベクトルを含むタグ構造や属性値が処理されることです。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-48700", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:10.372Z", "lastSuccess": "2026-10-23T03:24:10.372Z", "sourceCheckedAt": "2026-10-23T02:43:38.805Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-20122", "aliases": [], "title": "Cisco Catalyst SD-WAN Manager：脆弱性情報", "summary": "Cisco Catalyst SD-WAN Manager の API に不適切なファイル処理があり、認証済みのリモート攻撃者が API への読み取り専用権限を持つ有効なクレデンシャルを使用すると、ローカルファイルシステム上の任意のファイルを書き換えることができる。攻撃者は悪意のあるファイルをアップロードすることでこの脆弱性を利用でき、成功すると対象システム上の任意のファイルを上書きし、vmanage ユーザー権限を取得できる。", "risk": "任意のファイルが上書きされ、攻撃者が vmanage ユーザー権限を取得できる可能性がある。", "product": "Cisco Catalyst SD-WAN Manager", "category": "other", "component": "package", "severity": "medium", "cvss": 5.4, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "affected": [ { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.099" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.0.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.1.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.302" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.303" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.097" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.098" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.0.1a" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.501_ES" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.31" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.32" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_925" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1_927" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.2_937" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_928" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1_930" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.0.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_937" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.02" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.17" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.0.18.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.0.18.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1EFT2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.813" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.19" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.814" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.20" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.24" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.8.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1EFT2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.19" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.23" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.25" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.27" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.29" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.31" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.32" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.33" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.0.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3_LI_ Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.38" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.39" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.25" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.26" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.40" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.41" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.19" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.45" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.17" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.46" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.47" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.20" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.13" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.23" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.25" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.24" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.26" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.51" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.29" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.6.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.13.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.13.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.14.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.14.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.13" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.0.03" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.16.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.16.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.401" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.3_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6.0.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4_Monthly_ES5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7_LI _Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3_ LI _Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.501" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7.1_LI _Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1.01" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2_LI_Images" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20122", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20122", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-02-25T16:14:21.256Z", "modifiedAt": "2026-04-21T03:55:33.255Z", "fetchedAt": "2026-10-23T02:43:47.232Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.", "sourceTitle": "Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "versions": [ { "version": "20.1.12", "status": "affected" }, { "version": "19.2.1", "status": "affected" }, { "version": "18.4.4", "status": "affected" }, { "version": "18.4.5", "status": "affected" }, { "version": "20.1.1.1", "status": "affected" }, { "version": "20.1.1", "status": "affected" }, { "version": "19.3.0", "status": "affected" }, { "version": "19.2.2", "status": "affected" }, { "version": "19.2.099", "status": "affected" }, { "version": "18.3.6", "status": "affected" }, { "version": "18.3.7", "status": "affected" }, { "version": "19.2.0", "status": "affected" }, { "version": "18.3.8", "status": "affected" }, { "version": "19.0.0", "status": "affected" }, { "version": "19.1.0", "status": "affected" }, { "version": "18.4.302", "status": "affected" }, { "version": "18.4.303", "status": "affected" }, { "version": "19.2.097", "status": "affected" }, { "version": "19.2.098", "status": "affected" }, { "version": "17.2.10", "status": "affected" }, { "version": "18.3.6.1", "status": "affected" }, { "version": "19.0.1a", "status": "affected" }, { "version": "18.2.0", "status": "affected" }, { "version": "18.4.3", "status": "affected" }, { "version": "18.4.1", "status": "affected" }, { "version": "17.2.8", "status": "affected" }, { "version": "18.3.3.1", "status": "affected" }, { "version": "18.4.0", "status": "affected" }, { "version": "18.3.1", "status": "affected" }, { "version": "17.2.6", "status": "affected" }, { "version": "17.2.9", "status": "affected" }, { "version": "18.3.4", "status": "affected" }, { "version": "17.2.5", "status": "affected" }, { "version": "18.3.1.1", "status": "affected" }, { "version": "18.3.5", "status": "affected" }, { "version": "18.4.0.1", "status": "affected" }, { "version": "18.3.3", "status": "affected" }, { "version": "17.2.7", "status": "affected" }, { "version": "17.2.4", "status": "affected" }, { "version": "18.3.0", "status": "affected" }, { "version": "19.2.3", "status": "affected" }, { "version": "18.4.501_ES", "status": "affected" }, { "version": "20.3.1", "status": "affected" }, { "version": "20.1.2", "status": "affected" }, { "version": "19.2.929", "status": "affected" }, { "version": "19.2.31", "status": "affected" }, { "version": "20.3.2", "status": "affected" }, { "version": "19.2.32", "status": "affected" }, { "version": "20.3.2_925", "status": "affected" }, { "version": "20.3.2.1", "status": "affected" }, { "version": "20.3.2.1_927", "status": "affected" }, { "version": "18.4.6", "status": "affected" }, { "version": "20.1.2_937", "status": "affected" }, { "version": "20.4.1", "status": "affected" }, { "version": "20.3.2_928", "status": "affected" }, { "version": "20.3.2_929", "status": "affected" }, { "version": "20.4.1.0.1", "status": "affected" }, { "version": "20.3.2.1_930", "status": "affected" }, { "version": "19.2.4", "status": "affected" }, { "version": "20.5.0.1.1", "status": "affected" }, { "version": "20.4.1.1", "status": "affected" }, { "version": "20.3.3", "status": "affected" }, { "version": "19.2.4.0.1", "status": "affected" }, { "version": "20.3.2_937", "status": "affected" }, { "version": "20.3.3.1", "status": "affected" }, { "version": "20.5.1", "status": "affected" }, { "version": "20.1.3", "status": "affected" }, { "version": "20.3.3.0.4", "status": "affected" }, { "version": "20.3.3.1.2", "status": "affected" }, { "version": "20.3.3.1.1", "status": "affected" }, { "version": "20.4.1.2", "status": "affected" }, { "version": "20.3.3.0.2", "status": "affected" }, { "version": "20.4.1.1.5", "status": "affected" }, { "version": "20.4.1.0.01", "status": "affected" }, { "version": "20.4.1.0.02", "status": "affected" }, { "version": "20.3.3.1.7", "status": "affected" }, { "version": "20.3.3.1.5", "status": "affected" }, { "version": "20.5.1.0.1", "status": "affected" }, { "version": "20.3.3.1.10", "status": "affected" }, { "version": "20.3.3.0.8", "status": "affected" }, { "version": "20.4.2", "status": "affected" }, { "version": "20.4.2.0.1", "status": "affected" }, { "version": "20.3.4", "status": "affected" }, { "version": "20.3.3.0.14", "status": "affected" }, { "version": "19.2.4.0.8", "status": "affected" }, { "version": "19.2.4.0.9", "status": "affected" }, { "version": "20.3.4.0.1", "status": "affected" }, { "version": "20.3.2.0.5", "status": "affected" }, { "version": "20.6.1", "status": "affected" }, { "version": "20.5.1.0.2", "status": "affected" }, { "version": "20.3.3.0.17", "status": "affected" }, { "version": "20.6.1.1", "status": "affected" }, { "version": "20.6.0.18.3", "status": "affected" }, { "version": "20.3.2.0.6", "status": "affected" }, { "version": "20.6.0.18.4", "status": "affected" }, { "version": "20.4.2.0.2", "status": "affected" }, { "version": "20.3.3.0.16", "status": "affected" }, { "version": "20.3.4.0.5", "status": "affected" }, { "version": "20.6.1.0.1", "status": "affected" }, { "version": "20.3.4.0.6", "status": "affected" }, { "version": "20.6.2", "status": "affected" }, { "version": "20.7.1EFT2", "status": "affected" }, { "version": "20.3.4.0.9", "status": "affected" }, { "version": "20.3.4.0.11", "status": "affected" }, { "version": "20.4.2.0.4", "status": "affected" }, { "version": "20.3.3.0.18", "status": "affected" }, { "version": "20.7.1", "status": "affected" }, { "version": "20.6.2.1", "status": "affected" }, { "version": "20.3.4.1", "status": "affected" }, { "version": "20.5.1.1", "status": "affected" }, { "version": "20.4.2.1", "status": "affected" }, { "version": "20.4.2.1.1", "status": "affected" }, { "version": "20.3.4.1.1", "status": "affected" }, { "version": "20.3.813", "status": "affected" }, { "version": "20.3.4.0.19", "status": "affected" }, { "version": "20.4.2.2.1", "status": "affected" }, { "version": "20.5.1.2", "status": "affected" }, { "version": "20.3.4.2", "status": "affected" }, { "version": "20.3.814", "status": "affected" }, { "version": "20.4.2.2", "status": "affected" }, { "version": "20.6.2.2", "status": "affected" }, { "version": "20.3.4.2.1", "status": "affected" }, { "version": "20.7.1.1", "status": "affected" }, { "version": "20.3.4.1.2", "status": "affected" }, { "version": "20.6.2.2.2", "status": "affected" }, { "version": "20.3.4.0.20", "status": "affected" }, { "version": "20.6.2.2.3", "status": "affected" }, { "version": "20.4.2.2.2", "status": "affected" }, { "version": "20.3.5", "status": "affected" }, { "version": "20.6.2.0.4", "status": "affected" }, { "version": "20.4.2.2.3", "status": "affected" }, { "version": "20.3.4.0.24", "status": "affected" }, { "version": "20.6.2.2.7", "status": "affected" }, { "version": "20.6.3", "status": "affected" }, { "version": "20.3.4.2.2", "status": "affected" }, { "version": "20.4.2.2.4", "status": "affected" }, { "version": "20.7.1.0.2", "status": "affected" }, { "version": "20.8.1", "status": "affected" }, { "version": "20.3.5.0.8", "status": "affected" }, { "version": "20.3.5.0.9", "status": "affected" }, { "version": "20.4.2.2.8", "status": "affected" }, { "version": "20.3.5.0.7", "status": "affected" }, { "version": "20.6.3.0.7", "status": "affected" }, { "version": "20.6.3.0.5", "status": "affected" }, { "version": "20.6.3.0.10", "status": "affected" }, { "version": "20.6.3.0.2", "status": "affected" }, { "version": "20.7.2", "status": "affected" }, { "version": "20.9.1EFT2", "status": "affected" }, { "version": "20.6.3.0.11", "status": "affected" }, { "version": "20.6.3.1", "status": "affected" }, { "version": "20.6.3.0.14", "status": "affected" }, { "version": "20.6.4", "status": "affected" }, { "version": "20.9.1", "status": "affected" }, { "version": "20.6.3.0.19", "status": "affected" }, { "version": "20.6.3.0.18", "status": "affected" }, { "version": "20.3.6", "status": "affected" }, { "version": "20.9.1.1", "status": "affected" }, { "version": "20.6.3.0.23", "status": "affected" }, { "version": "20.6.4.0.4", "status": "affected" }, { "version": "20.6.3.0.25", "status": "affected" }, { "version": "20.6.5", "status": "affected" }, { "version": "20.6.3.0.27", "status": "affected" }, { "version": "20.9.2", "status": "affected" }, { "version": "20.9.2.1", "status": "affected" }, { "version": "20.6.3.0.29", "status": "affected" }, { "version": "20.6.3.0.31", "status": "affected" }, { "version": "20.6.3.0.32", "status": "affected" }, { "version": "20.10.1", "status": "affected" }, { "version": "20.6.3.0.33", "status": "affected" }, { "version": "20.9.2.0.01", "status": "affected" }, { "version": "20.9.1_LI_Images", "status": "affected" }, { "version": "20.10.1_LI_Images", "status": "affected" }, { "version": "20.9.2_LI_Images", "status": "affected" }, { "version": "20.3.7", "status": "affected" }, { "version": "20.9.3", "status": "affected" }, { "version": "20.6.5.1", "status": "affected" }, { "version": "20.11.1", "status": "affected" }, { "version": "20.11.1_LI_Images", "status": "affected" }, { "version": "20.9.3_LI_ Images", "status": "affected" }, { "version": "20.6.3.1.1", "status": "affected" }, { "version": "20.9.3.0.2", "status": "affected" }, { "version": "20.6.5.1.2", "status": "affected" }, { "version": "20.9.3.0.3", "status": "affected" }, { "version": "20.4.2.3", "status": "affected" }, { "version": "20.6.3.2", "status": "affected" }, { "version": "20.6.4.1", "status": "affected" }, { "version": "20.6.3.0.38", "status": "affected" }, { "version": "20.6.3.0.39", "status": "affected" }, { "version": "20.3.5.1", "status": "affected" }, { "version": "20.3.4.3", "status": "affected" }, { "version": "20.9.3.1", "status": "affected" }, { "version": "20.3.3.2", "status": "affected" }, { "version": "20.6.5.2", "status": "affected" }, { "version": "20.3.7.1", "status": "affected" }, { "version": "20.10.1.1", "status": "affected" }, { "version": "20.6.5.2.1", "status": "affected" }, { "version": "20.3.4.0.25", "status": "affected" }, { "version": "20.6.2.2.4", "status": "affected" }, { "version": "20.6.1.2", "status": "affected" }, { "version": "20.11.1.1", "status": "affected" }, { "version": "20.9.3.0.5", "status": "affected" }, { "version": "20.3.4.0.26", "status": "affected" }, { "version": "20.6.5.1.3", "status": "affected" }, { "version": "20.6.3.0.40", "status": "affected" }, { "version": "20.1.3.1", "status": "affected" }, { "version": "20.9.2.2", "status": "affected" }, { "version": "20.6.5.2.3", "status": "affected" }, { "version": "20.6.5.1.4", "status": "affected" }, { "version": "20.6.5.3", "status": "affected" }, { "version": "20.6.3.0.41", "status": "affected" }, { "version": "20.9.3.0.7", "status": "affected" }, { "version": "20.6.5.1.5", "status": "affected" }, { "version": "20.9.3.0.4", "status": "affected" }, { "version": "20.6.4.0.19", "status": "affected" }, { "version": "20.6.5.1.6", "status": "affected" }, { "version": "20.9.3.0.8", "status": "affected" }, { "version": "20.6.3.3", "status": "affected" }, { "version": "20.3.7.2", "status": "affected" }, { "version": "20.6.5.4", "status": "affected" }, { "version": "20.6.5.1.7", "status": "affected" }, { "version": "20.9.3.0.12", "status": "affected" }, { "version": "20.6.4.2", "status": "affected" }, { "version": "20.6.5.5", "status": "affected" }, { "version": "20.9.3.2", "status": "affected" }, { "version": "20.11.1.2", "status": "affected" }, { "version": "20.6.3.4", "status": "affected" }, { "version": "20.10.1.2", "status": "affected" }, { "version": "20.6.5.1.9", "status": "affected" }, { "version": "20.9.3.0.16", "status": "affected" }, { "version": "20.6.3.0.45", "status": "affected" }, { "version": "20.6.5.1.10", "status": "affected" }, { "version": "20.9.3.0.17", "status": "affected" }, { "version": "20.6.5.2.4", "status": "affected" }, { "version": "20.6.4.0.21", "status": "affected" }, { "version": "20.9.3.0.18", "status": "affected" }, { "version": "20.6.3.0.46", "status": "affected" }, { "version": "20.6.3.0.47", "status": "affected" }, { "version": "20.9.2.3", "status": "affected" }, { "version": "20.9.3.2_LI_Images", "status": "affected" }, { "version": "20.9.3.0.21", "status": "affected" }, { "version": "20.9.3.0.20", "status": "affected" }, { "version": "20.9.4_LI_Images", "status": "affected" }, { "version": "20.9.4", "status": "affected" }, { "version": "20.6.5.1.11", "status": "affected" }, { "version": "20.12.1", "status": "affected" }, { "version": "20.12.1_LI_Images", "status": "affected" }, { "version": "20.6.5.1.13", "status": "affected" }, { "version": "20.9.3.0.23", "status": "affected" }, { "version": "20.6.5.2.8", "status": "affected" }, { "version": "20.9.4.1", "status": "affected" }, { "version": "20.9.4.1_LI_Images", "status": "affected" }, { "version": "20.9.3.0.25", "status": "affected" }, { "version": "20.9.3.0.24", "status": "affected" }, { "version": "20.6.5.1.14", "status": "affected" }, { "version": "20.3.8", "status": "affected" }, { "version": "20.6.6", "status": "affected" }, { "version": "20.9.3.0.26", "status": "affected" }, { "version": "20.6.3.0.51", "status": "affected" }, { "version": "20.9.3.0.29", "status": "affected" }, { "version": "20.12.2", "status": "affected" }, { "version": "20.12.2_LI_Images", "status": "affected" }, { "version": "20.6.6.0.1", "status": "affected" }, { "version": "20.13.1_LI_Images", "status": "affected" }, { "version": "20.9.4.0.4", "status": "affected" }, { "version": "20.13.1", "status": "affected" }, { "version": "20.9.4.1.1", "status": "affected" }, { "version": "20.9.5", "status": "affected" }, { "version": "20.9.5_LI_Images", "status": "affected" }, { "version": "20.12.3_LI_Images", "status": "affected" }, { "version": "20.12.3", "status": "affected" }, { "version": "20.9.4.1.3", "status": "affected" }, { "version": "20.6.7", "status": "affected" }, { "version": "20.9.5.1", "status": "affected" }, { "version": "20.9.5.1_LI_Images", "status": "affected" }, { "version": "20.9.4.1.6", "status": "affected" }, { "version": "20.14.1", "status": "affected" }, { "version": "20.14.1_LI_Images", "status": "affected" }, { "version": "20.9.5.2", "status": "affected" }, { "version": "20.9.5.2.1", "status": "affected" }, { "version": "20.9.5.2_LI_Images", "status": "affected" }, { "version": "20.12.3.1", "status": "affected" }, { "version": "20.12.4", "status": "affected" }, { "version": "20.15.1_LI_Images", "status": "affected" }, { "version": "20.15.1", "status": "affected" }, { "version": "20.9.5.1.4", "status": "affected" }, { "version": "20.9.5.2.7", "status": "affected" }, { "version": "20.9.5.2.13", "status": "affected" }, { "version": "20.9.6", "status": "affected" }, { "version": "20.9.6_LI_Images", "status": "affected" }, { "version": "20.9.5.2.14", "status": "affected" }, { "version": "20.6.8", "status": "affected" }, { "version": "20.12.4.0.03", "status": "affected" }, { "version": "20.16.1", "status": "affected" }, { "version": "20.16.1_LI_Images", "status": "affected" }, { "version": "20.12.4_LI_Images", "status": "affected" }, { "version": "20.9.5.2.16", "status": "affected" }, { "version": "20.12.4.0.4", "status": "affected" }, { "version": "20.12.401", "status": "affected" }, { "version": "20.9.5.3", "status": "affected" }, { "version": "20.9.5.3_LI_Images", "status": "affected" }, { "version": "20.12.4.1_LI_Images", "status": "affected" }, { "version": "20.12.4.1", "status": "affected" }, { "version": "20.9.5.2.21", "status": "affected" }, { "version": "20.9.6.0.3", "status": "affected" }, { "version": "20.12.4.0.6", "status": "affected" }, { "version": "20.15.2_LI_Images", "status": "affected" }, { "version": "20.15.2", "status": "affected" }, { "version": "20.12.4_Monthly_ES5", "status": "affected" }, { "version": "20.12.5", "status": "affected" }, { "version": "20.12.5_LI_Images", "status": "affected" }, { "version": "20.9.7_LI _Images", "status": "affected" }, { "version": "20.9.7", "status": "affected" }, { "version": "20.15.3", "status": "affected" }, { "version": "20.15.3_ LI _Images", "status": "affected" }, { "version": "20.12.501", "status": "affected" }, { "version": "20.12.5.1_LI_Images", "status": "affected" }, { "version": "20.12.5.1", "status": "affected" }, { "version": "20.12.5.2_LI_Images", "status": "affected" }, { "version": "20.12.5.2", "status": "affected" }, { "version": "20.15.3.1", "status": "affected" }, { "version": "20.15.4_LI_Images", "status": "affected" }, { "version": "20.15.4", "status": "affected" }, { "version": "20.9.7.1_LI _Images", "status": "affected" }, { "version": "20.9.7.1", "status": "affected" }, { "version": "20.18.1", "status": "affected" }, { "version": "20.18.1_LI_Images", "status": "affected" }, { "version": "20.12.6_LI_Images", "status": "affected" }, { "version": "20.12.6", "status": "affected" }, { "version": "20.12.5.1.01", "status": "affected" }, { "version": "20.9.8", "status": "affected" }, { "version": "20.9.8_LI_Images", "status": "affected" }, { "version": "20.18.2", "status": "affected" }, { "version": "20.15.4.1_LI_Images", "status": "affected" }, { "version": "20.15.4.1", "status": "affected" }, { "version": "20.18.2_LI_Images", "status": "affected" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-20122", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "fetchedAt": "2026-10-23T02:43:47.232Z", "publishedAt": "2026-02-25T16:14:21.256Z", "modifiedAt": "2026-04-21T03:55:33.255Z", "state": "published", "provider": "cisco", "title": "Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability", "descriptions": [ { "lang": "en", "value": "A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "20.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "19.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "18.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "20.1.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "20.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "19.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "19.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "19.2.099", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "18.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "18.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "19.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "18.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "19.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "19.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "18.4.302", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "18.4.303", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "19.2.097", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "19.2.098", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "17.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "18.3.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "19.0.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "18.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "18.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "18.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "17.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "18.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "18.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "18.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "17.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "17.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "18.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "17.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "18.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "18.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "18.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "18.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "17.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "17.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "18.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "19.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "18.4.501_ES", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "20.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "20.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "19.2.929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "19.2.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "20.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "19.2.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "20.3.2_925", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "20.3.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "20.3.2.1_927", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "18.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "20.1.2_937", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "20.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "20.3.2_928", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "20.3.2_929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "20.4.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "20.3.2.1_930", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "19.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "20.5.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "20.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "20.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "19.2.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "20.3.2_937", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "20.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "20.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "20.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "20.3.3.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "20.3.3.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "20.3.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "20.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "20.3.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "20.4.1.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "20.4.1.0.01", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "20.4.1.0.02", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "20.3.3.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "20.3.3.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "20.5.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "20.3.3.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "20.3.3.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "20.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "20.4.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "20.3.3.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "19.2.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "19.2.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "20.3.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "20.3.2.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "20.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "20.5.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "20.3.3.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "20.6.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "20.6.0.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "20.3.2.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "20.6.0.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "20.4.2.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "20.3.3.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "20.3.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "20.6.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "20.3.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "20.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "20.7.1EFT2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "20.3.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "20.3.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "20.4.2.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "20.3.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "20.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "20.6.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "20.3.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "20.5.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "20.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "20.4.2.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "20.3.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "20.3.813", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "20.3.4.0.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "20.4.2.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "20.5.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "20.3.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "20.3.814", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "20.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "20.6.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "20.3.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "20.7.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "20.3.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "20.6.2.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "20.3.4.0.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "20.6.2.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "20.4.2.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "20.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "20.6.2.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "20.4.2.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "20.3.4.0.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "20.6.2.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "20.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "20.3.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "20.4.2.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "20.7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "20.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "20.3.5.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "20.3.5.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "20.4.2.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "20.3.5.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "20.6.3.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "20.6.3.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "20.6.3.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "20.6.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "20.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "20.9.1EFT2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "20.6.3.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "20.6.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "20.6.3.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "20.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "20.9.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "20.6.3.0.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "20.6.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "20.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "20.9.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "20.6.3.0.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "20.6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "20.6.3.0.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "20.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "20.6.3.0.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "20.9.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "20.9.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "20.6.3.0.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "20.6.3.0.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "20.6.3.0.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "20.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "20.6.3.0.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "20.9.2.0.01", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "20.9.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "20.10.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "20.9.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "20.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "20.9.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "20.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "20.11.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "20.11.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "20.9.3_LI_ Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "20.6.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "20.9.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "20.6.5.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "20.9.3.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "20.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "20.6.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "20.6.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "20.6.3.0.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "20.6.3.0.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "20.3.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "20.3.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "20.9.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "20.3.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "20.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "20.3.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "20.10.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "20.6.5.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "20.3.4.0.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "20.6.2.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "20.6.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "20.11.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "20.9.3.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "20.3.4.0.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "20.6.5.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "20.6.3.0.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "20.1.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "20.9.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/206", "version": "20.6.5.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/207", "version": "20.6.5.1.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/208", "version": "20.6.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/209", "version": "20.6.3.0.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/210", "version": "20.9.3.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/211", "version": "20.6.5.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/212", "version": "20.9.3.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/213", "version": "20.6.4.0.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/214", "version": "20.6.5.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/215", "version": "20.9.3.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/216", "version": "20.6.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/217", "version": "20.3.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/218", "version": "20.6.5.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/219", "version": "20.6.5.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/220", "version": "20.9.3.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/221", "version": "20.6.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/222", "version": "20.6.5.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/223", "version": "20.9.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/224", "version": "20.11.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/225", "version": "20.6.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/226", "version": "20.10.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/227", "version": "20.6.5.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/228", "version": "20.9.3.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/229", "version": "20.6.3.0.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/230", "version": "20.6.5.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/231", "version": "20.9.3.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/232", "version": "20.6.5.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/233", "version": "20.6.4.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/234", "version": "20.9.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/235", "version": "20.6.3.0.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/236", "version": "20.6.3.0.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/237", "version": "20.9.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/238", "version": "20.9.3.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/239", "version": "20.9.3.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/240", "version": "20.9.3.0.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/241", "version": "20.9.4_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/242", "version": "20.9.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/243", "version": "20.6.5.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/244", "version": "20.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/245", "version": "20.12.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/246", "version": "20.6.5.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/247", "version": "20.9.3.0.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/248", "version": "20.6.5.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/249", "version": "20.9.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/250", "version": "20.9.4.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/251", "version": "20.9.3.0.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/252", "version": "20.9.3.0.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/253", "version": "20.6.5.1.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/254", "version": "20.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/255", "version": "20.6.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/256", "version": "20.9.3.0.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/257", "version": "20.6.3.0.51", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/258", "version": "20.9.3.0.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/259", "version": "20.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/260", "version": "20.12.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/261", "version": "20.6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/262", "version": "20.13.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/263", "version": "20.9.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/264", "version": "20.13.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/265", "version": "20.9.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/266", "version": "20.9.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/267", "version": "20.9.5_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/268", "version": "20.12.3_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/269", "version": "20.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/270", "version": "20.9.4.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/271", "version": "20.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/272", "version": "20.9.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/273", "version": "20.9.5.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/274", "version": "20.9.4.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/275", "version": "20.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/276", "version": "20.14.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/277", "version": "20.9.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/278", "version": "20.9.5.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/279", "version": "20.9.5.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/280", "version": "20.12.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/281", "version": "20.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/282", "version": "20.15.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/283", "version": "20.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/284", "version": "20.9.5.1.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/285", "version": "20.9.5.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/286", "version": "20.9.5.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/287", "version": "20.9.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/288", "version": "20.9.6_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/289", "version": "20.9.5.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/290", "version": "20.6.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/291", "version": "20.12.4.0.03", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/292", "version": "20.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/293", "version": "20.16.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/294", "version": "20.12.4_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/295", "version": "20.9.5.2.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/296", "version": "20.12.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/297", "version": "20.12.401", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/298", "version": "20.9.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/299", "version": "20.9.5.3_LI_Images", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in CVE-2026-20133, CVE-2026-20126, and CVE-2026-20129.\r\n\r\nIn March 2026, the Cisco PSIRT became aware of active exploitation of the vulnerabilities that are described in CVE-2026-20128 and CVE-2026-20122 only. The vulnerabilities that are described in the other CVEs in this advisory are not known to have been compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-648", "lang": "en", "description": "Incorrect Use of Privileged APIs", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "cisco-sa-sdwan-authbp-qwCX8D4v", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2_925\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.1.2_937\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.01\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.7.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.10\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.11\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.14\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.9.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.27\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.31\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.32\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.33\",\"status\":\"affected\"},{\"version\":\"20.9.2.0.01\",\"status\":\"affected\"},{\"version\":\"20.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.10.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.6.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.38\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.39\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.40\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.41\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.14\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.51\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.6.0.1\",\"status\":\"affected\"},{\"version\":\"20.13.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.6\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.14.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.13\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.14\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.03\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.16.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.16\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.12.401\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.21\",\"status\":\"affected\"},{\"version\":\"20.9.6.0.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.15.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.4_Monthly_ES5\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.7_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3_ LI _Images\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"20.12.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.12.5.1.01\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.9.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2_LI_Images\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in CVE-2026-20133, CVE-2026-20126, and CVE-2026-20129.\r\n\r\nIn March 2026, the Cisco PSIRT became aware of active exploitation of the vulnerabilities that are described in CVE-2026-20128 and CVE-2026-20122 only. The vulnerabilities that are described in the other CVEs in this advisory are not known to have been compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Incorrect Use of Privileged APIs\",\"type\":\"cwe\",\"cweId\":\"CWE-648\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "bounded", "truncatedFields": [ "/containers/cna/affected/0/versions" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-21T03:55:33.255Z", "fetchedAt": "2026-10-23T02:43:47.232Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "sourceSummary": "Cisco Catalyst SD-WAN Managerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:10.721Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6125b7020c8b1a7b8dbb1e619a98ace4f21a71bfa7a7f117cc28b9fb32c85697", "sourceModifiedAt": "2026-04-21T03:55:33.255Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Catalyst SD-WAN Manager の API に不適切なファイル処理があり、認証済みのリモート攻撃者が API への読み取り専用権限を持つ有効なクレデンシャルを使用すると、ローカルファイルシステム上の任意のファイルを書き換えることができる。攻撃者は悪意のあるファイルをアップロードすることでこの脆弱性を利用でき、成功すると対象システム上の任意のファイルを上書きし、vmanage ユーザー権限を取得できる。", "risk": "任意のファイルが上書きされ、攻撃者が vmanage ユーザー権限を取得できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：17.2.4。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2_925。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.1.2_937。影響ありとして記載：20.4.1。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.3.3.1。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.01。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.0.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.6.1。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.3.3.0.17。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.3.4.0.5。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.6.2。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.4.2.0.4。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.7.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.5.1.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.6.2.2.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.3.5。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.4.2.2.3。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.6.3。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.7.1.0.2。影響ありとして記載：20.8.1。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.4.2.2.8。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.7。影響ありとして記載：20.6.3.0.5。影響ありとして記載：20.6.3.0.10。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.7.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.6.3.0.11。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.3.0.14。影響ありとして記載：20.6.4。影響ありとして記載：20.9.1。影響ありとして記載：20.6.3.0.19。影響ありとして記載：20.6.3.0.18。影響ありとして記載：20.3.6。影響ありとして記載：20.9.1.1。影響ありとして記載：20.6.3.0.23。影響ありとして記載：20.6.4.0.4。影響ありとして記載：20.6.3.0.25。影響ありとして記載：20.6.5。影響ありとして記載：20.6.3.0.27。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.6.3.0.29。影響ありとして記載：20.6.3.0.31。影響ありとして記載：20.6.3.0.32。影響ありとして記載：20.10.1。影響ありとして記載：20.6.3.0.33。影響ありとして記載：20.9.2.0.01。影響ありとして記載：20.9.1_LI_Images。影響ありとして記載：20.10.1_LI_Images。影響ありとして記載：20.9.2_LI_Images。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.6.5.1。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1_LI_Images。影響ありとして記載：20.9.3_LI_ Images。影響ありとして記載：20.6.3.1.1。影響ありとして記載：20.9.3.0.2。影響ありとして記載：20.6.5.1.2。影響ありとして記載：20.9.3.0.3。影響ありとして記載：20.4.2.3。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.3.0.38。影響ありとして記載：20.6.3.0.39。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.5.2.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.11.1.1。影響ありとして記載：20.9.3.0.5。影響ありとして記載：20.3.4.0.26。影響ありとして記載：20.6.5.1.3。影響ありとして記載：20.6.3.0.40。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.2.3。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.0.41。影響ありとして記載：20.9.3.0.7。影響ありとして記載：20.6.5.1.5。影響ありとして記載：20.9.3.0.4。影響ありとして記載：20.6.4.0.19。影響ありとして記載：20.6.5.1.6。影響ありとして記載：20.9.3.0.8。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.5.5。影響ありとして記載：20.9.3.2。影響ありとして記載：20.11.1.2。影響ありとして記載：20.6.3.4。影響ありとして記載：20.10.1.2。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.4.1_LI_Images。影響ありとして記載：20.9.3.0.25。影響ありとして記載：20.9.3.0.24。影響ありとして記載：20.6.5.1.14。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.9.3.0.26。影響ありとして記載：20.6.3.0.51。影響ありとして記載：20.9.3.0.29。影響ありとして記載：20.12.2。影響ありとして記載：20.12.2_LI_Images。影響ありとして記載：20.6.6.0.1。影響ありとして記載：20.13.1_LI_Images。影響ありとして記載：20.9.4.0.4。影響ありとして記載：20.13.1。影響ありとして記載：20.9.4.1.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5_LI_Images。影響ありとして記載：20.12.3_LI_Images。影響ありとして記載：20.12.3。影響ありとして記載：20.9.4.1.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.1_LI_Images。影響ありとして記載：20.9.4.1.6。影響ありとして記載：20.14.1。影響ありとして記載：20.14.1_LI_Images。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.5.2.1。影響ありとして記載：20.9.5.2_LI_Images。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1_LI_Images。影響ありとして記載：20.15.1。影響ありとして記載：20.9.5.1.4。影響ありとして記載：20.9.5.2.7。影響ありとして記載：20.9.5.2.13。影響ありとして記載：20.9.6。影響ありとして記載：20.9.6_LI_Images。影響ありとして記載：20.9.5.2.14。影響ありとして記載：20.6.8。影響ありとして記載：20.12.4.0.03。影響ありとして記載：20.16.1。影響ありとして記載：20.16.1_LI_Images。影響ありとして記載：20.12.4_LI_Images。影響ありとして記載：20.9.5.2.16。影響ありとして記載：20.12.4.0.4。影響ありとして記載：20.12.401。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.5.3_LI_Images。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cisco Catalyst SD-WAN Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20122", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20122" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-20122", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20122" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20122", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20122" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20122", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20122", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourceField": "/containers/cna/title", "excerpt": "Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2_925\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.1.2_937\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.01\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.7.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.10\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.11\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.14\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.9.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.27\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.31\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.32\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.33\",\"status\":\"affected\"},{\"version\":\"20.9.2.0.01\",\"status\":\"affected\"},{\"version\":\"20.9.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.10.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3_LI_ Images\",\"status\":\"affected\"},{\"version\":\"20.6.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.38\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.39\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.5\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.40\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.3\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.41\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.25\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.14\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.26\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.51\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.29\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.6.6.0.1\",\"status\":\"affected\"},{\"version\":\"20.13.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.3\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4.1.6\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.14.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.15.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.7\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.13\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.14\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.03\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.16.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.16\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.4\",\"status\":\"affected\"},{\"version\":\"20.12.401\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.5.3_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2.21\",\"status\":\"affected\"},{\"version\":\"20.9.6.0.3\",\"status\":\"affected\"},{\"version\":\"20.12.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.15.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.12.4_Monthly_ES5\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.7_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3_ LI _Images\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"20.12.5.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.9.7.1_LI _Images\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.12.5.1.01\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.9.8_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"},{\"version\":\"20.15.4.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.18.2_LI_Images\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20122", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-20122\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-20122（Cisco Catalyst SD-WAN Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：17.2.4。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2_925。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.1.2_937。影響ありとして記載：20.4.1。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.3.3.1。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.01。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.0.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.6.1。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.3.3.0.17。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.3.4.0.5。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.6.2。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.4.2.0.4。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.7.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.5.1.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.6.2.2.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.3.5。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.4.2.2.3。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.6.3。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.7.1.0.2。影響ありとして記載：20.8.1。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.4.2.2.8。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.7。影響ありとして記載：20.6.3.0.5。影響ありとして記載：20.6.3.0.10。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.7.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.6.3.0.11。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.3.0.14。影響ありとして記載：20.6.4。影響ありとして記載：20.9.1。影響ありとして記載：20.6.3.0.19。影響ありとして記載：20.6.3.0.18。影響ありとして記載：20.3.6。影響ありとして記載：20.9.1.1。影響ありとして記載：20.6.3.0.23。影響ありとして記載：20.6.4.0.4。影響ありとして記載：20.6.3.0.25。影響ありとして記載：20.6.5。影響ありとして記載：20.6.3.0.27。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.6.3.0.29。影響ありとして記載：20.6.3.0.31。影響ありとして記載：20.6.3.0.32。影響ありとして記載：20.10.1。影響ありとして記載：20.6.3.0.33。影響ありとして記載：20.9.2.0.01。影響ありとして記載：20.9.1_LI_Images。影響ありとして記載：20.10.1_LI_Images。影響ありとして記載：20.9.2_LI_Images。影響ありとして記載：20.3.7。影響ありとして記載：20.9.3。影響ありとして記載：20.6.5.1。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1_LI_Images。影響ありとして記載：20.9.3_LI_ Images。影響ありとして記載：20.6.3.1.1。影響ありとして記載：20.9.3.0.2。影響ありとして記載：20.6.5.1.2。影響ありとして記載：20.9.3.0.3。影響ありとして記載：20.4.2.3。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.3.0.38。影響ありとして記載：20.6.3.0.39。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.3.3.2。影響ありとして記載：20.6.5.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.6.5.2.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.11.1.1。影響ありとして記載：20.9.3.0.5。影響ありとして記載：20.3.4.0.26。影響ありとして記載：20.6.5.1.3。影響ありとして記載：20.6.3.0.40。影響ありとして記載：20.1.3.1。影響ありとして記載：20.9.2.2。影響ありとして記載：20.6.5.2.3。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.3.0.41。影響ありとして記載：20.9.3.0.7。影響ありとして記載：20.6.5.1.5。影響ありとして記載：20.9.3.0.4。影響ありとして記載：20.6.4.0.19。影響ありとして記載：20.6.5.1.6。影響ありとして記載：20.9.3.0.8。影響ありとして記載：20.6.3.3。影響ありとして記載：20.3.7.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.5.5。影響ありとして記載：20.9.3.2。影響ありとして記載：20.11.1.2。影響ありとして記載：20.6.3.4。影響ありとして記載：20.10.1.2。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.4.1_LI_Images。影響ありとして記載：20.9.3.0.25。影響ありとして記載：20.9.3.0.24。影響ありとして記載：20.6.5.1.14。影響ありとして記載：20.3.8。影響ありとして記載：20.6.6。影響ありとして記載：20.9.3.0.26。影響ありとして記載：20.6.3.0.51。影響ありとして記載：20.9.3.0.29。影響ありとして記載：20.12.2。影響ありとして記載：20.12.2_LI_Images。影響ありとして記載：20.6.6.0.1。影響ありとして記載：20.13.1_LI_Images。影響ありとして記載：20.9.4.0.4。影響ありとして記載：20.13.1。影響ありとして記載：20.9.4.1.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5_LI_Images。影響ありとして記載：20.12.3_LI_Images。影響ありとして記載：20.12.3。影響ありとして記載：20.9.4.1.3。影響ありとして記載：20.6.7。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.1_LI_Images。影響ありとして記載：20.9.4.1.6。影響ありとして記載：20.14.1。影響ありとして記載：20.14.1_LI_Images。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.5.2.1。影響ありとして記載：20.9.5.2_LI_Images。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.15.1_LI_Images。影響ありとして記載：20.15.1。影響ありとして記載：20.9.5.1.4。影響ありとして記載：20.9.5.2.7。影響ありとして記載：20.9.5.2.13。影響ありとして記載：20.9.6。影響ありとして記載：20.9.6_LI_Images。影響ありとして記載：20.9.5.2.14。影響ありとして記載：20.6.8。影響ありとして記載：20.12.4.0.03。影響ありとして記載：20.16.1。影響ありとして記載：20.16.1_LI_Images。影響ありとして記載：20.12.4_LI_Images。影響ありとして記載：20.9.5.2.16。影響ありとして記載：20.12.4.0.4。影響ありとして記載：20.12.401。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.5.3_LI_Images。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20122", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:10.721Z", "lastSuccess": "2026-10-23T03:24:10.721Z", "sourceCheckedAt": "2026-10-23T02:43:47.232Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-20128", "aliases": [], "title": "Cisco Catalyst SD-WAN Manager：情報の漏えい", "summary": "Cisco Catalyst SD-WAN Manager のデータコレクションエージェント（DCA）機能に脆弱性があり、認証されていないリモート攻撃者が対象システムで DCA ユーザー権限を取得できる可能性があります。この脆弱性は、対象システムに DCA ユーザー用の認証情報ファイルが残っていることが原因です。攻撃者は細工した HTTP リクエストを送信し、そのファイルを読み取ることで DCA パスワードを取得できます。成功すれば、別の対象システムにアクセスし、DCA ユーザー権限を得られます。Cisco Catalyst SD-WAN Manager のリリース 20.18 以降はこの脆弱性の影響を受けません。", "risk": "攻撃者が DCA ユーザー権限を取得すると、対象システム上で DCA の機能を利用できるようになる。", "product": "Cisco Catalyst SD-WAN Manager", "category": "other", "component": "package", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.099" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.0.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.1.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.302" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.303" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.097" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.098" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.0.1a" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.501_ES" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.31" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.32" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1_927" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_928" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1_930" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.0.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2_937" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.0.02" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.14" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.0.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.0.18.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.0.18.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1EFT2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.813" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.19" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.814" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.20" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.0.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.24" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.0.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1EFT2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.0.25" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.501" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "26.1.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20128", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20128", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-02-25T16:14:12.353Z", "modifiedAt": "2026-04-21T03:55:31.648Z", "fetchedAt": "2026-10-23T02:43:47.253Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system.\r\n\r\nThis vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.\r\nNote: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.", "sourceTitle": "Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "versions": [ { "version": "20.1.12", "status": "affected" }, { "version": "19.2.1", "status": "affected" }, { "version": "18.4.4", "status": "affected" }, { "version": "18.4.5", "status": "affected" }, { "version": "20.1.1.1", "status": "affected" }, { "version": "20.1.1", "status": "affected" }, { "version": "19.3.0", "status": "affected" }, { "version": "19.2.2", "status": "affected" }, { "version": "19.2.099", "status": "affected" }, { "version": "18.3.6", "status": "affected" }, { "version": "18.3.7", "status": "affected" }, { "version": "19.2.0", "status": "affected" }, { "version": "18.3.8", "status": "affected" }, { "version": "19.0.0", "status": "affected" }, { "version": "19.1.0", "status": "affected" }, { "version": "18.4.302", "status": "affected" }, { "version": "18.4.303", "status": "affected" }, { "version": "19.2.097", "status": "affected" }, { "version": "19.2.098", "status": "affected" }, { "version": "17.2.10", "status": "affected" }, { "version": "18.3.6.1", "status": "affected" }, { "version": "19.0.1a", "status": "affected" }, { "version": "18.2.0", "status": "affected" }, { "version": "18.4.3", "status": "affected" }, { "version": "18.4.1", "status": "affected" }, { "version": "17.2.8", "status": "affected" }, { "version": "18.3.3.1", "status": "affected" }, { "version": "18.4.0", "status": "affected" }, { "version": "18.3.1", "status": "affected" }, { "version": "17.2.6", "status": "affected" }, { "version": "17.2.9", "status": "affected" }, { "version": "18.3.4", "status": "affected" }, { "version": "17.2.5", "status": "affected" }, { "version": "18.3.1.1", "status": "affected" }, { "version": "18.3.5", "status": "affected" }, { "version": "18.4.0.1", "status": "affected" }, { "version": "18.3.3", "status": "affected" }, { "version": "17.2.7", "status": "affected" }, { "version": "18.3.0", "status": "affected" }, { "version": "19.2.3", "status": "affected" }, { "version": "18.4.501_ES", "status": "affected" }, { "version": "20.3.1", "status": "affected" }, { "version": "20.1.2", "status": "affected" }, { "version": "19.2.929", "status": "affected" }, { "version": "19.2.31", "status": "affected" }, { "version": "20.3.2", "status": "affected" }, { "version": "19.2.32", "status": "affected" }, { "version": "20.3.2.1", "status": "affected" }, { "version": "20.3.2.1_927", "status": "affected" }, { "version": "18.4.6", "status": "affected" }, { "version": "20.3.2_928", "status": "affected" }, { "version": "20.3.2_929", "status": "affected" }, { "version": "20.4.1.0.1", "status": "affected" }, { "version": "20.3.2.1_930", "status": "affected" }, { "version": "19.2.4", "status": "affected" }, { "version": "20.5.0.1.1", "status": "affected" }, { "version": "20.4.1.1", "status": "affected" }, { "version": "20.3.3", "status": "affected" }, { "version": "19.2.4.0.1", "status": "affected" }, { "version": "20.3.2_937", "status": "affected" }, { "version": "20.5.1", "status": "affected" }, { "version": "20.1.3", "status": "affected" }, { "version": "20.3.3.0.4", "status": "affected" }, { "version": "20.3.3.1.2", "status": "affected" }, { "version": "20.3.3.1.1", "status": "affected" }, { "version": "20.4.1.2", "status": "affected" }, { "version": "20.3.3.0.2", "status": "affected" }, { "version": "20.4.1.1.5", "status": "affected" }, { "version": "20.4.1.0.02", "status": "affected" }, { "version": "20.3.3.1.7", "status": "affected" }, { "version": "20.3.3.1.5", "status": "affected" }, { "version": "20.5.1.0.1", "status": "affected" }, { "version": "20.3.3.1.10", "status": "affected" }, { "version": "20.3.3.0.8", "status": "affected" }, { "version": "20.4.2", "status": "affected" }, { "version": "20.3.4", "status": "affected" }, { "version": "20.3.3.0.14", "status": "affected" }, { "version": "19.2.4.0.8", "status": "affected" }, { "version": "19.2.4.0.9", "status": "affected" }, { "version": "20.3.4.0.1", "status": "affected" }, { "version": "20.3.2.0.5", "status": "affected" }, { "version": "20.5.1.0.2", "status": "affected" }, { "version": "20.6.1.1", "status": "affected" }, { "version": "20.6.0.18.3", "status": "affected" }, { "version": "20.3.2.0.6", "status": "affected" }, { "version": "20.6.0.18.4", "status": "affected" }, { "version": "20.4.2.0.2", "status": "affected" }, { "version": "20.3.3.0.16", "status": "affected" }, { "version": "20.6.1.0.1", "status": "affected" }, { "version": "20.3.4.0.6", "status": "affected" }, { "version": "20.7.1EFT2", "status": "affected" }, { "version": "20.3.4.0.9", "status": "affected" }, { "version": "20.3.4.0.11", "status": "affected" }, { "version": "20.3.3.0.18", "status": "affected" }, { "version": "20.6.2.1", "status": "affected" }, { "version": "20.3.4.1", "status": "affected" }, { "version": "20.4.2.1", "status": "affected" }, { "version": "20.4.2.1.1", "status": "affected" }, { "version": "20.3.4.1.1", "status": "affected" }, { "version": "20.3.813", "status": "affected" }, { "version": "20.3.4.0.19", "status": "affected" }, { "version": "20.4.2.2.1", "status": "affected" }, { "version": "20.5.1.2", "status": "affected" }, { "version": "20.3.814", "status": "affected" }, { "version": "20.4.2.2", "status": "affected" }, { "version": "20.6.2.2", "status": "affected" }, { "version": "20.3.4.2.1", "status": "affected" }, { "version": "20.3.4.1.2", "status": "affected" }, { "version": "20.3.4.0.20", "status": "affected" }, { "version": "20.6.2.2.3", "status": "affected" }, { "version": "20.4.2.2.2", "status": "affected" }, { "version": "20.6.2.0.4", "status": "affected" }, { "version": "20.3.4.0.24", "status": "affected" }, { "version": "20.6.2.2.7", "status": "affected" }, { "version": "20.3.4.2.2", "status": "affected" }, { "version": "20.4.2.2.4", "status": "affected" }, { "version": "20.3.5.0.8", "status": "affected" }, { "version": "20.3.5.0.9", "status": "affected" }, { "version": "20.3.5.0.7", "status": "affected" }, { "version": "20.6.3.0.2", "status": "affected" }, { "version": "20.9.1EFT2", "status": "affected" }, { "version": "20.3.6", "status": "affected" }, { "version": "20.3.7", "status": "affected" }, { "version": "20.4.2.3", "status": "affected" }, { "version": "20.3.5.1", "status": "affected" }, { "version": "20.3.4.3", "status": "affected" }, { "version": "20.3.3.2", "status": "affected" }, { "version": "20.3.7.1", "status": "affected" }, { "version": "20.3.4.0.25", "status": "affected" }, { "version": "20.6.2.2.4", "status": "affected" }, { "version": "20.6.1.2", "status": "affected" }, { "version": "20.1.3.1", "status": "affected" }, { "version": "20.6.5.1.4", "status": "affected" }, { "version": "20.3.8", "status": "affected" }, { "version": "20.12.501", "status": "affected" }, { "version": "26.1.1", "status": "affected" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-20128", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "fetchedAt": "2026-10-23T02:43:47.253Z", "publishedAt": "2026-02-25T16:14:12.353Z", "modifiedAt": "2026-04-21T03:55:31.648Z", "state": "published", "provider": "cisco", "title": "Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability", "descriptions": [ { "lang": "en", "value": "A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system.\r\n\r\nThis vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.\r\nNote: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "20.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "19.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "18.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "20.1.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "20.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "19.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "19.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "19.2.099", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "18.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "18.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "19.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "18.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "19.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "19.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "18.4.302", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "18.4.303", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "19.2.097", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "19.2.098", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "17.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "18.3.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "19.0.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "18.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "18.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "18.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "17.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "18.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "18.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "18.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "17.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "17.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "18.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "17.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "18.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "18.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "18.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "18.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "17.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "18.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "19.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "18.4.501_ES", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "20.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "20.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "19.2.929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "19.2.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "20.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "19.2.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "20.3.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "20.3.2.1_927", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "18.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "20.3.2_928", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "20.3.2_929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "20.4.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "20.3.2.1_930", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "19.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "20.5.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "20.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "20.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "19.2.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "20.3.2_937", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "20.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "20.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "20.3.3.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "20.3.3.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "20.3.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "20.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "20.3.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "20.4.1.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "20.4.1.0.02", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "20.3.3.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "20.3.3.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "20.5.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "20.3.3.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "20.3.3.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "20.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "20.3.3.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "19.2.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "19.2.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "20.3.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "20.3.2.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "20.5.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "20.6.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "20.6.0.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "20.3.2.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "20.6.0.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "20.4.2.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "20.3.3.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "20.6.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "20.3.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "20.7.1EFT2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "20.3.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "20.3.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "20.3.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "20.6.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "20.3.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "20.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "20.4.2.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "20.3.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "20.3.813", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "20.3.4.0.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "20.4.2.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "20.5.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "20.3.814", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "20.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "20.6.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "20.3.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "20.3.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "20.3.4.0.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "20.6.2.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "20.4.2.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "20.6.2.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "20.3.4.0.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "20.6.2.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "20.3.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "20.4.2.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "20.3.5.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "20.3.5.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "20.3.5.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "20.6.3.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "20.9.1EFT2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "20.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "20.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "20.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "20.3.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "20.3.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "20.3.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "20.3.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "20.3.4.0.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "20.6.2.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "20.6.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "20.1.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "20.6.5.1.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "20.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "20.12.501", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "26.1.1", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in CVE-2026-20133, CVE-2026-20126, and CVE-2026-20129.\r\n\r\nIn March 2026, the Cisco PSIRT became aware of active exploitation of the vulnerabilities that are described in CVE-2026-20128 and CVE-2026-20122 only. The vulnerabilities that are described in the other CVEs in this advisory are not known to have been compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-257", "lang": "en", "description": "Storing Passwords in a Recoverable Format", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "cisco-sa-sdwan-authbp-qwCX8D4v", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20128", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system.\r\n\r\nThis vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.\r\nNote: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in CVE-2026-20133, CVE-2026-20126, and CVE-2026-20129.\r\n\r\nIn March 2026, the Cisco PSIRT became aware of active exploitation of the vulnerabilities that are described in CVE-2026-20128 and CVE-2026-20122 only. The vulnerabilities that are described in the other CVEs in this advisory are not known to have been compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Storing Passwords in a Recoverable Format\",\"type\":\"cwe\",\"cweId\":\"CWE-257\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-21T03:55:31.648Z", "fetchedAt": "2026-10-23T02:43:47.253Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "sourceSummary": "Cisco Catalyst SD-WAN Managerに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:10.889Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "eb527ac34c178add238e53824447747a83a4dc85ee860c75274c3534ea2a6fd2", "sourceModifiedAt": "2026-04-21T03:55:31.648Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Catalyst SD-WAN Manager のデータコレクションエージェント（DCA）機能に脆弱性があり、認証されていないリモート攻撃者が対象システムで DCA ユーザー権限を取得できる可能性があります。この脆弱性は、対象システムに DCA ユーザー用の認証情報ファイルが残っていることが原因です。攻撃者は細工した HTTP リクエストを送信し、そのファイルを読み取ることで DCA パスワードを取得できます。成功すれば、別の対象システムにアクセスし、DCA ユーザー権限を得られます。Cisco Catalyst SD-WAN Manager のリリース 20.18 以降はこの脆弱性の影響を受けません。", "risk": "攻撃者が DCA ユーザー権限を取得すると、対象システム上で DCA の機能を利用できるようになる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていないリモート攻撃者が存在すること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象システムに DCA ユーザー用の認証情報ファイルが残っていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者が細工した HTTP リクエストを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者がそのリクエストにより認証情報ファイルを読み取れること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "読み取った認証情報から DCA パスワードを取得できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "取得したパスワードで別の対象システムにアクセスできること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるバージョンは 20.18 未満のリリースであること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.3.6。影響ありとして記載：20.3.7。影響ありとして記載：20.4.2.3。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.3.3.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.1.3.1。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.3.8。影響ありとして記載：20.12.501。影響ありとして記載：26.1.1。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cisco Catalyst SD-WAN Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20128", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20128" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-20128", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20128" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20128", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20128" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20128", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20128", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system.\r\n\r\nThis vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.\r\nNote: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourceField": "/containers/cna/title", "excerpt": "Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20128.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"18.3.6\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"19.0.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.098\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"19.0.1a\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"18.4.501_ES\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"19.2.32\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_927\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"20.3.2_928\",\"status\":\"affected\"},{\"version\":\"20.3.2_929\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.1_930\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.5.0.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2_937\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.4.1.1.5\",\"status\":\"affected\"},{\"version\":\"20.4.1.0.02\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.7\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.3.1.10\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.8\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.14\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.8\",\"status\":\"affected\"},{\"version\":\"19.2.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.5\",\"status\":\"affected\"},{\"version\":\"20.5.1.0.2\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.3\",\"status\":\"affected\"},{\"version\":\"20.3.2.0.6\",\"status\":\"affected\"},{\"version\":\"20.6.0.18.4\",\"status\":\"affected\"},{\"version\":\"20.4.2.0.2\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.6.1.0.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.6\",\"status\":\"affected\"},{\"version\":\"20.7.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.11\",\"status\":\"affected\"},{\"version\":\"20.3.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.3.813\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.19\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.814\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.20\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.3\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2.0.4\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.24\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.7\",\"status\":\"affected\"},{\"version\":\"20.3.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.8\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.9\",\"status\":\"affected\"},{\"version\":\"20.3.5.0.7\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.2\",\"status\":\"affected\"},{\"version\":\"20.9.1EFT2\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.2\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.0.25\",\"status\":\"affected\"},{\"version\":\"20.6.2.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.1.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.4\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.12.501\",\"status\":\"affected\"},{\"version\":\"26.1.1\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20128", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-20128\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-20128（Cisco Catalyst SD-WAN Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないリモート攻撃者が存在すること。\n・対象システムに DCA ユーザー用の認証情報ファイルが残っていること。\n・攻撃者が細工した HTTP リクエストを送信できること。\n・攻撃者がそのリクエストにより認証情報ファイルを読み取れること。\n・読み取った認証情報から DCA パスワードを取得できること。\n・取得したパスワードで別の対象システムにアクセスできること。\n・影響を受けるバージョンは 20.18 未満のリリースであること。\n・公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：20.1.12。影響ありとして記載：19.2.1。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.1。影響ありとして記載：19.3.0。影響ありとして記載：19.2.2。影響ありとして記載：19.2.099。影響ありとして記載：18.3.6。影響ありとして記載：18.3.7。影響ありとして記載：19.2.0。影響ありとして記載：18.3.8。影響ありとして記載：19.0.0。影響ありとして記載：19.1.0。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：19.2.097。影響ありとして記載：19.2.098。影響ありとして記載：17.2.10。影響ありとして記載：18.3.6.1。影響ありとして記載：19.0.1a。影響ありとして記載：18.2.0。影響ありとして記載：18.4.3。影響ありとして記載：18.4.1。影響ありとして記載：17.2.8。影響ありとして記載：18.3.3.1。影響ありとして記載：18.4.0。影響ありとして記載：18.3.1。影響ありとして記載：17.2.6。影響ありとして記載：17.2.9。影響ありとして記載：18.3.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.5。影響ありとして記載：18.4.0.1。影響ありとして記載：18.3.3。影響ありとして記載：17.2.7。影響ありとして記載：18.3.0。影響ありとして記載：19.2.3。影響ありとして記載：18.4.501_ES。影響ありとして記載：20.3.1。影響ありとして記載：20.1.2。影響ありとして記載：19.2.929。影響ありとして記載：19.2.31。影響ありとして記載：20.3.2。影響ありとして記載：19.2.32。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.2.1_927。影響ありとして記載：18.4.6。影響ありとして記載：20.3.2_928。影響ありとして記載：20.3.2_929。影響ありとして記載：20.4.1.0.1。影響ありとして記載：20.3.2.1_930。影響ありとして記載：19.2.4。影響ありとして記載：20.5.0.1.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.3.3。影響ありとして記載：19.2.4.0.1。影響ありとして記載：20.3.2_937。影響ありとして記載：20.5.1。影響ありとして記載：20.1.3。影響ありとして記載：20.3.3.0.4。影響ありとして記載：20.3.3.1.2。影響ありとして記載：20.3.3.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.3.3.0.2。影響ありとして記載：20.4.1.1.5。影響ありとして記載：20.4.1.0.02。影響ありとして記載：20.3.3.1.7。影響ありとして記載：20.3.3.1.5。影響ありとして記載：20.5.1.0.1。影響ありとして記載：20.3.3.1.10。影響ありとして記載：20.3.3.0.8。影響ありとして記載：20.4.2。影響ありとして記載：20.3.4。影響ありとして記載：20.3.3.0.14。影響ありとして記載：19.2.4.0.8。影響ありとして記載：19.2.4.0.9。影響ありとして記載：20.3.4.0.1。影響ありとして記載：20.3.2.0.5。影響ありとして記載：20.5.1.0.2。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.0.18.3。影響ありとして記載：20.3.2.0.6。影響ありとして記載：20.6.0.18.4。影響ありとして記載：20.4.2.0.2。影響ありとして記載：20.3.3.0.16。影響ありとして記載：20.6.1.0.1。影響ありとして記載：20.3.4.0.6。影響ありとして記載：20.7.1EFT2。影響ありとして記載：20.3.4.0.9。影響ありとして記載：20.3.4.0.11。影響ありとして記載：20.3.3.0.18。影響ありとして記載：20.6.2.1。影響ありとして記載：20.3.4.1。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.1.1。影響ありとして記載：20.3.4.1.1。影響ありとして記載：20.3.813。影響ありとして記載：20.3.4.0.19。影響ありとして記載：20.4.2.2.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.3.814。影響ありとして記載：20.4.2.2。影響ありとして記載：20.6.2.2。影響ありとして記載：20.3.4.2.1。影響ありとして記載：20.3.4.1.2。影響ありとして記載：20.3.4.0.20。影響ありとして記載：20.6.2.2.3。影響ありとして記載：20.4.2.2.2。影響ありとして記載：20.6.2.0.4。影響ありとして記載：20.3.4.0.24。影響ありとして記載：20.6.2.2.7。影響ありとして記載：20.3.4.2.2。影響ありとして記載：20.4.2.2.4。影響ありとして記載：20.3.5.0.8。影響ありとして記載：20.3.5.0.9。影響ありとして記載：20.3.5.0.7。影響ありとして記載：20.6.3.0.2。影響ありとして記載：20.9.1EFT2。影響ありとして記載：20.3.6。影響ありとして記載：20.3.7。影響ありとして記載：20.4.2.3。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.3.3.2。影響ありとして記載：20.3.7.1。影響ありとして記載：20.3.4.0.25。影響ありとして記載：20.6.2.2.4。影響ありとして記載：20.6.1.2。影響ありとして記載：20.1.3.1。影響ありとして記載：20.6.5.1.4。影響ありとして記載：20.3.8。影響ありとして記載：20.12.501。影響ありとして記載：26.1.1。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20128", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:10.889Z", "lastSuccess": "2026-10-23T03:24:10.889Z", "sourceCheckedAt": "2026-10-23T02:43:47.253Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-20133", "aliases": [], "title": "Cisco Catalyst SD-WAN Manager：情報の漏えい", "summary": "Cisco Catalyst SD-WAN ソフトウェアの脆弱性により、認証されていないリモート攻撃者がファイルシステムの制限が不十分なため、影響を受けたシステム上の機密情報を閲覧できる可能性があります。また、netadmin 権限を持つ認証済みの攻撃者が対象システムの vshell にアクセスすると、基盤となるオペレーティングシステム上の機密情報を読み取ることができます。", "risk": "攻撃者がシステム上の機密情報を閲覧できる可能性があります。", "product": "Cisco Catalyst SD-WAN Manager", "category": "other", "component": "package", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.302" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.303" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.097" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.099" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.31" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.1.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.45" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.46" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.47" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.13" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.8.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.17" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.20" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.23" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.13.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.14.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.16.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20133", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20133", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-02-25T16:13:56.017Z", "modifiedAt": "2026-04-22T15:31:56.704Z", "fetchedAt": "2026-10-23T02:43:47.321Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "versions": [ { "version": "17.2.6", "status": "affected" }, { "version": "17.2.7", "status": "affected" }, { "version": "17.2.8", "status": "affected" }, { "version": "17.2.9", "status": "affected" }, { "version": "17.2.10", "status": "affected" }, { "version": "17.2.4", "status": "affected" }, { "version": "17.2.5", "status": "affected" }, { "version": "18.3.1.1", "status": "affected" }, { "version": "18.3.3.1", "status": "affected" }, { "version": "18.3.3", "status": "affected" }, { "version": "18.3.4", "status": "affected" }, { "version": "18.3.5", "status": "affected" }, { "version": "18.3.7", "status": "affected" }, { "version": "18.3.8", "status": "affected" }, { "version": "18.3.6.1", "status": "affected" }, { "version": "18.3.1", "status": "affected" }, { "version": "18.3.0", "status": "affected" }, { "version": "18.4.0.1", "status": "affected" }, { "version": "18.4.3", "status": "affected" }, { "version": "18.4.302", "status": "affected" }, { "version": "18.4.303", "status": "affected" }, { "version": "18.4.4", "status": "affected" }, { "version": "18.4.5", "status": "affected" }, { "version": "18.4.0", "status": "affected" }, { "version": "18.4.1", "status": "affected" }, { "version": "18.4.6", "status": "affected" }, { "version": "19.2.0", "status": "affected" }, { "version": "19.2.097", "status": "affected" }, { "version": "19.2.099", "status": "affected" }, { "version": "19.2.1", "status": "affected" }, { "version": "19.2.2", "status": "affected" }, { "version": "19.2.3", "status": "affected" }, { "version": "19.2.31", "status": "affected" }, { "version": "19.2.929", "status": "affected" }, { "version": "19.2.4", "status": "affected" }, { "version": "20.1.1.1", "status": "affected" }, { "version": "20.1.12", "status": "affected" }, { "version": "20.1.1", "status": "affected" }, { "version": "20.1.2", "status": "affected" }, { "version": "20.1.3", "status": "affected" }, { "version": "19.3.0", "status": "affected" }, { "version": "19.1.0", "status": "affected" }, { "version": "18.2.0", "status": "affected" }, { "version": "20.3.1", "status": "affected" }, { "version": "20.3.2", "status": "affected" }, { "version": "20.3.2.1", "status": "affected" }, { "version": "20.3.3", "status": "affected" }, { "version": "20.3.3.1", "status": "affected" }, { "version": "20.3.4", "status": "affected" }, { "version": "20.3.4.1", "status": "affected" }, { "version": "20.3.4.2", "status": "affected" }, { "version": "20.3.5", "status": "affected" }, { "version": "20.3.6", "status": "affected" }, { "version": "20.3.7", "status": "affected" }, { "version": "20.3.7.1", "status": "affected" }, { "version": "20.3.4.3", "status": "affected" }, { "version": "20.3.5.1", "status": "affected" }, { "version": "20.3.7.2", "status": "affected" }, { "version": "20.3.8", "status": "affected" }, { "version": "20.4.1", "status": "affected" }, { "version": "20.4.1.1", "status": "affected" }, { "version": "20.4.1.2", "status": "affected" }, { "version": "20.4.2", "status": "affected" }, { "version": "20.4.2.2", "status": "affected" }, { "version": "20.4.2.1", "status": "affected" }, { "version": "20.4.2.3", "status": "affected" }, { "version": "20.5.1", "status": "affected" }, { "version": "20.5.1.2", "status": "affected" }, { "version": "20.5.1.1", "status": "affected" }, { "version": "20.6.1", "status": "affected" }, { "version": "20.6.1.1", "status": "affected" }, { "version": "20.6.2.1", "status": "affected" }, { "version": "20.6.2.2", "status": "affected" }, { "version": "20.6.2", "status": "affected" }, { "version": "20.6.3", "status": "affected" }, { "version": "20.6.3.1", "status": "affected" }, { "version": "20.6.4", "status": "affected" }, { "version": "20.6.5", "status": "affected" }, { "version": "20.6.5.1", "status": "affected" }, { "version": "20.6.5.3", "status": "affected" }, { "version": "20.6.1.2", "status": "affected" }, { "version": "20.6.3.2", "status": "affected" }, { "version": "20.6.4.1", "status": "affected" }, { "version": "20.6.5.2", "status": "affected" }, { "version": "20.6.5.4", "status": "affected" }, { "version": "20.6.3.3", "status": "affected" }, { "version": "20.6.4.2", "status": "affected" }, { "version": "20.6.3.0.45", "status": "affected" }, { "version": "20.6.3.0.46", "status": "affected" }, { "version": "20.6.3.0.47", "status": "affected" }, { "version": "20.6.3.4", "status": "affected" }, { "version": "20.6.4.0.21", "status": "affected" }, { "version": "20.6.5.1.10", "status": "affected" }, { "version": "20.6.5.1.11", "status": "affected" }, { "version": "20.6.5.1.7", "status": "affected" }, { "version": "20.6.5.1.9", "status": "affected" }, { "version": "20.6.5.2.4", "status": "affected" }, { "version": "20.6.5.5", "status": "affected" }, { "version": "20.6.5.2.8", "status": "affected" }, { "version": "20.6.5.1.13", "status": "affected" }, { "version": "20.6.6", "status": "affected" }, { "version": "20.6.7", "status": "affected" }, { "version": "20.6.8", "status": "affected" }, { "version": "20.7.1", "status": "affected" }, { "version": "20.7.1.1", "status": "affected" }, { "version": "20.7.2", "status": "affected" }, { "version": "20.8.1", "status": "affected" }, { "version": "20.9.1", "status": "affected" }, { "version": "20.9.2", "status": "affected" }, { "version": "20.9.2.1", "status": "affected" }, { "version": "20.9.3", "status": "affected" }, { "version": "20.9.3.1", "status": "affected" }, { "version": "20.9.2.3", "status": "affected" }, { "version": "20.9.3.0.12", "status": "affected" }, { "version": "20.9.3.0.16", "status": "affected" }, { "version": "20.9.3.0.17", "status": "affected" }, { "version": "20.9.3.0.18", "status": "affected" }, { "version": "20.9.3.0.20", "status": "affected" }, { "version": "20.9.3.0.21", "status": "affected" }, { "version": "20.9.3.2", "status": "affected" }, { "version": "20.9.3.2_LI_Images", "status": "affected" }, { "version": "20.9.4", "status": "affected" }, { "version": "20.9.4_LI_Images", "status": "affected" }, { "version": "20.9.3.0.23", "status": "affected" }, { "version": "20.9.4.1", "status": "affected" }, { "version": "20.9.5", "status": "affected" }, { "version": "20.9.5.1", "status": "affected" }, { "version": "20.9.5.2", "status": "affected" }, { "version": "20.9.6", "status": "affected" }, { "version": "20.9.5.3", "status": "affected" }, { "version": "20.9.7", "status": "affected" }, { "version": "20.9.7.1", "status": "affected" }, { "version": "20.9.8", "status": "affected" }, { "version": "20.10.1", "status": "affected" }, { "version": "20.10.1.1", "status": "affected" }, { "version": "20.10.1.2", "status": "affected" }, { "version": "20.11.1", "status": "affected" }, { "version": "20.11.1.1", "status": "affected" }, { "version": "20.11.1.2", "status": "affected" }, { "version": "20.12.1", "status": "affected" }, { "version": "20.12.1_LI_Images", "status": "affected" }, { "version": "20.12.2", "status": "affected" }, { "version": "20.12.3", "status": "affected" }, { "version": "20.12.3.1", "status": "affected" }, { "version": "20.12.4", "status": "affected" }, { "version": "20.12.4.1", "status": "affected" }, { "version": "20.12.5", "status": "affected" }, { "version": "20.12.5.1", "status": "affected" }, { "version": "20.12.5.2", "status": "affected" }, { "version": "20.12.6", "status": "affected" }, { "version": "20.13.1", "status": "affected" }, { "version": "20.14.1", "status": "affected" }, { "version": "20.15.1", "status": "affected" }, { "version": "20.15.2", "status": "affected" }, { "version": "20.15.3", "status": "affected" }, { "version": "20.15.3.1", "status": "affected" }, { "version": "20.15.4", "status": "affected" }, { "version": "20.15.4.1", "status": "affected" }, { "version": "20.16.1", "status": "affected" }, { "version": "20.18.1", "status": "affected" }, { "version": "20.18.2", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-20133", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "fetchedAt": "2026-10-23T02:43:47.321Z", "publishedAt": "2026-02-25T16:13:56.017Z", "modifiedAt": "2026-04-22T15:31:56.704Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "17.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "17.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "17.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "17.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "17.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "17.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "17.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "18.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "18.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "18.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "18.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "18.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "18.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "18.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "18.3.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "18.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "18.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "18.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "18.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "18.4.302", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "18.4.303", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "18.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "18.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "18.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "18.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "19.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "19.2.097", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "19.2.099", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "19.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "19.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "19.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "19.2.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "19.2.929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "19.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "20.1.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "20.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "20.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "20.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "20.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "19.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "19.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "18.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "20.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "20.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "20.3.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "20.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "20.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "20.3.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "20.3.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "20.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "20.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "20.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "20.3.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "20.3.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "20.3.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "20.3.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "20.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "20.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "20.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "20.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "20.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "20.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "20.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "20.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "20.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "20.5.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "20.5.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "20.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "20.6.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "20.6.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "20.6.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "20.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "20.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "20.6.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "20.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "20.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "20.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "20.6.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "20.6.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "20.6.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "20.6.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "20.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "20.6.5.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "20.6.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "20.6.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "20.6.3.0.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "20.6.3.0.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "20.6.3.0.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "20.6.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "20.6.4.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "20.6.5.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "20.6.5.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "20.6.5.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "20.6.5.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "20.6.5.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "20.6.5.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "20.6.5.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "20.6.5.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "20.6.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "20.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "20.6.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "20.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "20.7.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "20.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "20.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "20.9.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "20.9.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "20.9.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "20.9.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "20.9.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "20.9.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "20.9.3.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "20.9.3.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "20.9.3.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "20.9.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "20.9.3.0.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "20.9.3.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "20.9.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "20.9.3.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "20.9.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "20.9.4_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "20.9.3.0.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "20.9.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "20.9.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "20.9.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "20.9.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "20.9.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "20.9.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "20.9.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "20.9.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "20.9.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "20.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "20.10.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "20.10.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "20.11.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "20.11.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "20.11.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "20.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "20.12.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "20.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "20.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "20.12.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "20.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "20.12.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "20.12.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "20.12.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "20.12.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "20.12.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "20.13.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "20.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "20.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "20.15.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "20.15.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "20.15.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "20.15.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "20.15.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "20.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "20.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "20.18.2", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "In April 2026, the Cisco PSIRT became aware of active exploitation of the vulnerability that is described in CVE-2026-20133. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-200", "lang": "en", "description": "Exposure of Sensitive Information to an Unauthorized Actor", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "cisco-sa-sdwan-authbp-qwCX8D4v", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20133", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "In April 2026, the Cisco PSIRT became aware of active exploitation of the vulnerability that is described in CVE-2026-20133. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Exposure of Sensitive Information to an Unauthorized Actor\",\"type\":\"cwe\",\"cweId\":\"CWE-200\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-22T15:31:56.704Z", "fetchedAt": "2026-10-23T02:43:47.321Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "sourceSummary": "Cisco Catalyst SD-WAN Managerに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:11.703Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e51a4a2b05d8ce60a3d507c1641d31ec4e33fcad37f9e47a5932c98d643b9c1d", "sourceModifiedAt": "2026-04-22T15:31:56.704Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Catalyst SD-WAN ソフトウェアの脆弱性により、認証されていないリモート攻撃者がファイルシステムの制限が不十分なため、影響を受けたシステム上の機密情報を閲覧できる可能性があります。また、netadmin 権限を持つ認証済みの攻撃者が対象システムの vshell にアクセスすると、基盤となるオペレーティングシステム上の機密情報を読み取ることができます。", "risk": "攻撃者がシステム上の機密情報を閲覧できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていないリモート攻撃者がこの脆弱性を利用できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E1" ] }, { "text": "netadmin 権限を持つ認証済みの攻撃者が vshell にアクセスすることでこの脆弱性を利用できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：17.2.6。影響ありとして記載：17.2.7。影響ありとして記載：17.2.8。影響ありとして記載：17.2.9。影響ありとして記載：17.2.10。影響ありとして記載：17.2.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.3.1。影響ありとして記載：18.3.3。影響ありとして記載：18.3.4。影響ありとして記載：18.3.5。影響ありとして記載：18.3.7。影響ありとして記載：18.3.8。影響ありとして記載：18.3.6.1。影響ありとして記載：18.3.1。影響ありとして記載：18.3.0。影響ありとして記載：18.4.0.1。影響ありとして記載：18.4.3。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：18.4.0。影響ありとして記載：18.4.1。影響ありとして記載：18.4.6。影響ありとして記載：19.2.0。影響ありとして記載：19.2.097。影響ありとして記載：19.2.099。影響ありとして記載：19.2.1。影響ありとして記載：19.2.2。影響ありとして記載：19.2.3。影響ありとして記載：19.2.31。影響ありとして記載：19.2.929。影響ありとして記載：19.2.4。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.12。影響ありとして記載：20.1.1。影響ありとして記載：20.1.2。影響ありとして記載：20.1.3。影響ありとして記載：19.3.0。影響ありとして記載：19.1.0。影響ありとして記載：18.2.0。影響ありとして記載：20.3.1。影響ありとして記載：20.3.2。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.3。影響ありとして記載：20.3.3.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.4.1。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.5。影響ありとして記載：20.3.6。影響ありとして記載：20.3.7。影響ありとして記載：20.3.7.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.7.2。影響ありとして記載：20.3.8。影響ありとして記載：20.4.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.2。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.3。影響ありとして記載：20.5.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.5.1.1。影響ありとして記載：20.6.1。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.6.2.2。影響ありとして記載：20.6.2。影響ありとして記載：20.6.3。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.4。影響ありとして記載：20.6.5。影響ありとして記載：20.6.5.1。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.1.2。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.5.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.3.3。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.6.3.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.5.5。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.6.6。影響ありとして記載：20.6.7。影響ありとして記載：20.6.8。影響ありとして記載：20.7.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.7.2。影響ありとして記載：20.8.1。影響ありとして記載：20.9.1。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.9.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.2。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.6。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.7。影響ありとして記載：20.9.7.1。影響ありとして記載：20.9.8。影響ありとして記載：20.10.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.10.1.2。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1.1。影響ありとして記載：20.11.1.2。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.12.2。影響ありとして記載：20.12.3。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.12.4.1。影響ありとして記載：20.12.5。影響ありとして記載：20.12.5.1。影響ありとして記載：20.12.5.2。影響ありとして記載：20.12.6。影響ありとして記載：20.13.1。影響ありとして記載：20.14.1。影響ありとして記載：20.15.1。影響ありとして記載：20.15.2。影響ありとして記載：20.15.3。影響ありとして記載：20.15.3.1。影響ありとして記載：20.15.4。影響ありとして記載：20.15.4.1。影響ありとして記載：20.16.1。影響ありとして記載：20.18.1。影響ありとして記載：20.18.2。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Cisco Catalyst SD-WAN Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20133", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20133" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-20133", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20133" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20133", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20133" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20133", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20133", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-20133\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-20133（Cisco Catalyst SD-WAN Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないリモート攻撃者がこの脆弱性を利用できる。\n・netadmin 権限を持つ認証済みの攻撃者が vshell にアクセスすることでこの脆弱性を利用できる。\n・公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：17.2.6。影響ありとして記載：17.2.7。影響ありとして記載：17.2.8。影響ありとして記載：17.2.9。影響ありとして記載：17.2.10。影響ありとして記載：17.2.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.3.1。影響ありとして記載：18.3.3。影響ありとして記載：18.3.4。影響ありとして記載：18.3.5。影響ありとして記載：18.3.7。影響ありとして記載：18.3.8。影響ありとして記載：18.3.6.1。影響ありとして記載：18.3.1。影響ありとして記載：18.3.0。影響ありとして記載：18.4.0.1。影響ありとして記載：18.4.3。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：18.4.0。影響ありとして記載：18.4.1。影響ありとして記載：18.4.6。影響ありとして記載：19.2.0。影響ありとして記載：19.2.097。影響ありとして記載：19.2.099。影響ありとして記載：19.2.1。影響ありとして記載：19.2.2。影響ありとして記載：19.2.3。影響ありとして記載：19.2.31。影響ありとして記載：19.2.929。影響ありとして記載：19.2.4。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.12。影響ありとして記載：20.1.1。影響ありとして記載：20.1.2。影響ありとして記載：20.1.3。影響ありとして記載：19.3.0。影響ありとして記載：19.1.0。影響ありとして記載：18.2.0。影響ありとして記載：20.3.1。影響ありとして記載：20.3.2。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.3。影響ありとして記載：20.3.3.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.4.1。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.5。影響ありとして記載：20.3.6。影響ありとして記載：20.3.7。影響ありとして記載：20.3.7.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.7.2。影響ありとして記載：20.3.8。影響ありとして記載：20.4.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.2。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.3。影響ありとして記載：20.5.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.5.1.1。影響ありとして記載：20.6.1。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.6.2.2。影響ありとして記載：20.6.2。影響ありとして記載：20.6.3。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.4。影響ありとして記載：20.6.5。影響ありとして記載：20.6.5.1。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.1.2。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.5.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.3.3。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.6.3.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.5.5。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.6.6。影響ありとして記載：20.6.7。影響ありとして記載：20.6.8。影響ありとして記載：20.7.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.7.2。影響ありとして記載：20.8.1。影響ありとして記載：20.9.1。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.9.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.2。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.6。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.7。影響ありとして記載：20.9.7.1。影響ありとして記載：20.9.8。影響ありとして記載：20.10.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.10.1.2。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1.1。影響ありとして記載：20.11.1.2。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.12.2。影響ありとして記載：20.12.3。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.12.4.1。影響ありとして記載：20.12.5。影響ありとして記載：20.12.5.1。影響ありとして記載：20.12.5.2。影響ありとして記載：20.12.6。影響ありとして記載：20.13.1。影響ありとして記載：20.14.1。影響ありとして記載：20.15.1。影響ありとして記載：20.15.2。影響ありとして記載：20.15.3。影響ありとして記載：20.15.3.1。影響ありとして記載：20.15.4。影響ありとして記載：20.15.4.1。影響ありとして記載：20.16.1。影響ありとして記載：20.18.1。影響ありとして記載：20.18.2。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20133", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:11.703Z", "lastSuccess": "2026-10-23T03:24:11.703Z", "sourceCheckedAt": "2026-10-23T02:43:47.321Z", "errorCode": null }, "glossary": [] } } ], "total": 2205, "limit": 20, "offset": 580, "filters": { "product": "all", "type": "all", "q": "", "page": 30 }, "pagination": { "page": 30, "pageSize": 20, "totalPages": 111 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T22:17:49.999Z", "lastAttempt": "2026-10-23T22:17:49.999Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-23T21:17:50.096Z", "lastAttempt": "2026-10-23T22:17:49.999Z", "error": "GitHub API取得上限に到達 (2026-10-23T22:37:16.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T22:17:49.999Z", "lastAttempt": "2026-10-23T22:17:49.999Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "partial", "lastSuccess": "2026-10-23T19:17:50.573Z", "lastAttempt": "2026-10-23T22:17:49.999Z", "error": "未確認のページ・期間は次回の定期取得で続きから反映します。", "recordCount": 7, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T19:02:50.573Z 〜 2026-10-23T21:17:50.096Z、全製品の変更 1000/2168件まで確認、対象7件反映。", "cursor": { "start": "2026-10-23T19:02:50.573Z", "end": "2026-10-23T21:17:50.096Z", "kind": "modified", "index": 1000 }, "freshness": "stale", "stale": true }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T22:17:49.999Z", "lastAttempt": "2026-10-23T22:17:49.999Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }