{
 "generated_at": "2026-10-28T02:32:45+00:00",
 "window_days": 14,
 "criteria": "公開用の基準 版1(ops/security-triage/CRITERIA.md)",
 "items": [
  {
   "item_id": "nvd:CVE-2026-110879",
   "description": "jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be rejected as direct type IDs. This bypasses the generic-argument validation added for CVE-2026-54512 (GHSA-j3rv-43j4-c7qm), of which this is an incomplete fix.\n\n\n\nDatabindContext._resolveAndValidateGeneric() checks the outer class against the declared base type and then passes each argument from the type ID to _validateTypeParameter(), which validates the argument against the outer base type rather than enforcing its corresponding declared generic binding. It also invokes validators with arguments that have not passed the subtype check those validators expect. Under the default DefaultBaseTypeLimitingValidator this accepts an unrelated class inside a generic subtype even when the same class is rejected as a direct type ID. Where an allowIfBaseType(...) rule approves the outer type, Jackson substitutes LaissezFaireSubTypeValidator, so the configured validator no longer restricts the embedded arguments. The element type of a plain array type ID such as [Lpkg.Gadget; is likewise left unvalidated once the array's base type is approved.\n\n\n\nAffected paths include annotation-based class-name polymorphism with a default Jackson 3.x JsonMapper, configured default typing in both Jackson 2.x and 3.x, and integrations that expose that default typing. The default-validator case requires no application-authored validator: with @JsonTypeInfo(use = Id.CLASS), a direct gadget type ID is rejected as \"Not a subtype\", while a type ID naming a generic wrapper around the same gadget is accepted and deserialized, including attacker-supplied bean properties. Where class-name default typing permits Map, a property declared as Map<String,String> accepts HashMap<FileSystemXmlApplicationContext,String>; map-key discovery then passes the attacker-controlled JSON property name to the selected class's one-string constructor. With Spring on the classpath and attacker-controlled XML the application can load, that constructor loads the XML and invokes ProcessBuilder.start() under the application account, giving arbitrary command execution.\n\n\n\nThis issue affects com.fasterxml.jackson.core:jackson-databind from 2.10.0 and tools.jackson.core:jackson-databind from 3.0.0. Releases before 2.10.0 are not affected, because PolymorphicTypeValidator was introduced in jackson-databind 2.10.0.",
   "title": "CVE-2026-110879",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110879",
   "source": "nvd",
   "published": "2026-10-28T01:16:55+00:00",
   "cve_ids": [
    "CVE-2026-110879"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "jackson-databind は、クラス名型IDの外側のクラスを検証する一方で、ジェネリック引数の中にある攻撃者が選んだクラスを、宣言された型に違反する場合や直接の型IDとしては拒否される場合でも受け入れます。これは CVE-2026-54512 で追加されたジェネリック引数の検証を回避するもので、その修正が不完全だったものです。対象は com.fasterxml.jackson.core:jackson-databind の 2.10.0 以降と、tools.jackson.core:jackson-databind の 3.0.0 以降です。"
  },
  {
   "item_id": "nvd:CVE-2026-58256",
   "description": "GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as `ldap_filter`, poisoning `/personnalisation/config_ldap.inc.php` and permitting remote code execution. The administrator must first successfully connect to an LDAP server, which can be attacker-controlled, and then submit malicious input on the subsequent connector settings page. The advisory reports this issue as fixed in version 4.5.0.",
   "title": "CVE-2026-58256",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58256",
   "source": "nvd",
   "published": "2026-10-27T23:17:06+00:00",
   "cve_ids": [
    "CVE-2026-58256"
   ],
   "cvss_v3": 9.1,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "GRRはリソース管理・予約アプリケーションである。アドバイザリで修正済みとされるバージョン4.5.0より前では、管理者がLDAPコネクタの設定パラメータ(`ldap_filter`など)に悪意あるPHPを注入でき、`/personnalisation/config_ldap.inc.php`が汚染されてリモートコード実行が可能になる。管理者は、攻撃者が管理するものでもよいLDAPサーバーにまず接続に成功し、その後のコネクタ設定ページで悪意ある入力を送信する必要がある。"
  },
  {
   "item_id": "nvd:CVE-2026-116692",
   "description": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants of THIRD_PARTY_SCORER_ALLOWED_MODULES rather than requiring an exact allowed module. A caller can use MLflow artifact endpoints to place a Python module beneath a writable allowed package and submit its module and class through /ajax-api/3.0/mlflow/scorer/invoke. Scorer.model_validate_json() imports the module and constructs the class before trace processing. Authentication-disabled deployments permit this code execution without credentials, while basic-auth deployments require a principal capable of creating an experiment and run and uploading artifacts. In either configuration, the allowed scorer package must be writable by the server process. This issue is fixed in version 3.17.0.",
   "title": "CVE-2026-116692",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116692",
   "source": "nvd",
   "published": "2026-10-27T21:18:05+00:00",
   "cve_ids": [
    "CVE-2026-116692"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "MLflow の 3.12.0rc0 から 3.17.0 未満のバージョンでは、mlflow/genai/scorers/base.py のサードパーティ製スコアラーのデシリアライズ処理が、許可されたモジュールそのものではなく、THIRD_PARTY_SCORER_ALLOWED_MODULES の下位モジュールも受け付けるとされています。呼び出し側は、MLflow のアーティファクト用エンドポイントを使って書き込み可能な許可済みパッケージの下に Python モジュールを置き、/ajax-api/3.0/mlflow/scorer/invoke にそのモジュールとクラスを指定して送信できるとされています。認証が無効な構成では資格情報なしでこのコード実行が可能で、basic 認証の構成では実験と run の作成およびアーティファクトのアップロードができる主体が必要です。この問題はバージョン 3.17.0 で修正されています。"
  },
  {
   "item_id": "nvd:CVE-2026-112352",
   "description": "Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection. Attackers can guess default account names such as Admin or sftp_user and submit a forged username cookie to satisfy the login check in checkLogin (libwebcmn.so) and networkDiag.cgi, chaining into root command execution.",
   "title": "CVE-2026-112352",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112352",
   "source": "nvd",
   "published": "2026-10-27T20:17:12+00:00",
   "cve_ids": [
    "CVE-2026-112352"
   ],
   "cvss_v3": 9.1,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Sunhillo SureLine の 9.1.5 より前のバージョンには認証バイパスの脆弱性があり、認証されていないリモートの攻撃者が、平文のユーザー名だけを含む偽のセッションクッキーを作ることで、有効なウェブセッションを持つ任意のユーザーになりすませるとされている。攻撃者は Admin や sftp_user といった既定のアカウント名を推測し、偽造したクッキーを送って checkLogin (libwebcmn.so) と networkDiag.cgi のログイン確認を通過でき、さらに root 権限でのコマンド実行につながるとされている。"
  },
  {
   "item_id": "nvd:CVE-2026-48360",
   "description": "Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.",
   "title": "CVE-2026-48360",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48360",
   "source": "nvd",
   "published": "2026-10-27T17:17:00+00:00",
   "cve_ids": [
    "CVE-2026-48360"
   ],
   "cvss_v3": 9.6,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Connectに、コードインジェクション(生成されるコードの不適切な制御)の脆弱性があり、現在のユーザーの権限で任意のコードが実行される可能性があると記載されています。攻撃者がこの脆弱性を悪用すると、任意のコードを実行できるとされています。悪用には、被害者が細工されたURLにアクセスするか、侵害されたウェブページを操作するといったユーザーの操作が必要で、スコープは変更されると記載されています。"
  },
  {
   "item_id": "nvd:CVE-2026-114595",
   "description": "In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.",
   "title": "CVE-2026-114595",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114595",
   "source": "nvd",
   "published": "2026-10-27T17:16:58+00:00",
   "cve_ids": [
    "CVE-2026-114595"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "EPICS Base のリリース 7.0.10 およびそれ以前のバージョンでは、ネットワークリクエスト処理における整数オーバーフローにより、誤ったサイズでメモリが割り当てられることがあります。その後に攻撃者が供給したデータが処理されると、メモリ破壊、サービス拒否、またはリモートコード実行につながる可能性があると説明されています。"
  },
  {
   "item_id": "nvd:CVE-2026-105781",
   "description": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.",
   "title": "CVE-2026-105781",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105781",
   "source": "nvd",
   "published": "2026-10-27T17:16:56+00:00",
   "cve_ids": [
    "CVE-2026-105781"
   ],
   "cvss_v3": 10.0,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic (ACC) に、SQLコマンドで使用される特殊要素の不適切な無効化(SQLインジェクション)の脆弱性がある。この脆弱性により、現在のユーザーのコンテキストで任意のコードが実行される可能性がある。攻撃者は任意のSQLコマンドを実行でき、悪用にユーザー操作は不要で、スコープは変更される(Scope is changed)と記載されている。"
  },
  {
   "item_id": "nvd:CVE-2026-105779",
   "description": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.",
   "title": "CVE-2026-105779",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105779",
   "source": "nvd",
   "published": "2026-10-27T17:16:56+00:00",
   "cve_ids": [
    "CVE-2026-105779"
   ],
   "cvss_v3": 9.1,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic (ACC) に、SQLコマンドで使用される特殊要素の不適切な無害化(SQLインジェクション)の脆弱性があり、セキュリティ機能のバイパスにつながる可能性があると説明されています。権限の低い攻撃者がこの脆弱性を利用すると、セキュリティ対策を回避し、不正な読み取りアクセスと限定的な書き込みアクセスを得られるとされています。悪用にユーザーの操作は不要で、スコープは変更されると記載されています。"
  },
  {
   "item_id": "nvd:CVE-2026-105780",
   "description": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.",
   "title": "CVE-2026-105780",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105780",
   "source": "nvd",
   "published": "2026-10-27T17:16:56+00:00",
   "cve_ids": [
    "CVE-2026-105780"
   ],
   "cvss_v3": 9.9,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic(ACC)に、不適切な認可の脆弱性が存在します。この脆弱性により、現在のユーザーの権限で任意のコードが実行される可能性があります。低権限の攻撃者がこの脆弱性を悪用でき、悪用にあたってユーザーの操作は不要で、スコープは変更されると記載されています。"
  },
  {
   "item_id": "nvd:CVE-2026-105489",
   "description": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.",
   "title": "CVE-2026-105489",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105489",
   "source": "nvd",
   "published": "2026-10-27T17:16:56+00:00",
   "cve_ids": [
    "CVE-2026-105489"
   ],
   "cvss_v3": 9.9,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic (ACC) に、SQLコマンドで使われる特殊要素の不適切な無効化(SQLインジェクション)の脆弱性があり、現在のユーザーの権限で任意のコードが実行される可能性があると説明されている。権限の低い攻撃者がこの脆弱性を悪用して任意のコードを実行でき、悪用にユーザーの操作は不要である。また、スコープは変更される(Scope is changed)と記載されている。"
  },
  {
   "item_id": "nvd:CVE-2026-104350",
   "description": "Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.",
   "title": "CVE-2026-104350",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104350",
   "source": "nvd",
   "published": "2026-10-27T17:16:55+00:00",
   "cve_ids": [
    "CVE-2026-104350"
   ],
   "cvss_v3": 9.3,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic (ACC) に、反射型クロスサイトスクリプティング (XSS) の脆弱性があります。攻撃者がこの脆弱性を悪用すると、Webページに悪意のあるスクリプトを注入し、被害者のアカウントやセッションに対する昇格したアクセスや制御を得る可能性があります。悪用には、被害者が悪意を持って作成されたURLにアクセスするか、侵害されたWebページを操作するというユーザー操作が必要で、スコープは変更されます。"
  },
  {
   "item_id": "nvd:CVE-2026-104353",
   "description": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.",
   "title": "CVE-2026-104353",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104353",
   "source": "nvd",
   "published": "2026-10-27T17:16:55+00:00",
   "cve_ids": [
    "CVE-2026-104353"
   ],
   "cvss_v3": 9.9,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic (ACC) に、OSコマンドインジェクション(特殊要素の不適切な無効化)の脆弱性が存在します。この脆弱性により、現在のユーザーの権限で任意のコードが実行される可能性があります。権限の低い攻撃者が悪用でき、悪用にユーザーの操作は不要で、スコープは変更されると説明されています。"
  },
  {
   "item_id": "nvd:CVE-2026-104351",
   "description": "Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.",
   "title": "CVE-2026-104351",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104351",
   "source": "nvd",
   "published": "2026-10-27T17:16:55+00:00",
   "cve_ids": [
    "CVE-2026-104351"
   ],
   "cvss_v3": 9.9,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic (ACC) に、コードインジェクション(コード生成の不適切な制御)の脆弱性が存在すると説明されています。この脆弱性により、現在のユーザーの権限で任意のコードが実行される可能性があり、低権限の攻撃者が悪用できるとされています。悪用にユーザーの操作は不要で、スコープは変更されると記載されています。"
  },
  {
   "item_id": "nvd:CVE-2026-104354",
   "description": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.",
   "title": "CVE-2026-104354",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104354",
   "source": "nvd",
   "published": "2026-10-27T17:16:55+00:00",
   "cve_ids": [
    "CVE-2026-104354"
   ],
   "cvss_v3": 9.1,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Adobe Campaign Classic(ACC)に、SQLコマンドで使われる特殊要素の不適切な無害化(SQLインジェクション)の脆弱性があり、現在のユーザーの権限で任意のコードが実行される可能性があるとされています。高い権限を持つ攻撃者がこの脆弱性を悪用して任意のコードを実行できるとされています。悪用にユーザーの操作は不要で、スコープは変更される(Scope is changed)と記載されています。"
  },
  {
   "item_id": "nvd:CVE-2026-116863",
   "description": "Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.",
   "title": "CVE-2026-116863",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116863",
   "source": "nvd",
   "published": "2026-10-27T16:17:30+00:00",
   "cve_ids": [
    "CVE-2026-116863"
   ],
   "cvss_v3": 9.6,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "Tribulant Software の Newsletters(newsletters-lite)に、クロスサイトリクエストフォージェリ(CSRF)の脆弱性があるとされています。この問題は、Newsletters のバージョン n/a から 4.18.2 までに影響すると記載されています。"
  },
  {
   "item_id": "nvd:CVE-2026-117564",
   "description": "nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.",
   "title": "CVE-2026-117564",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-117564",
   "source": "nvd",
   "published": "2026-10-27T14:16:38+00:00",
   "cve_ids": [
    "CVE-2026-117564"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "nest-admin の 1.0.1 より前のバージョンには、認証バイパスの脆弱性が存在する。.env.production にコミットされていたハードコードの JWT_SECRET を使って、認証されていない攻撃者が管理者トークンを偽造できる。攻撃者は JwtStrategy と RbacGuard が信頼する既知の秘密鍵でトークンに署名し、任意のユーザー ID のなりすましや管理者ロールの主張によって、完全な管理アクセスを得られる。"
  },
  {
   "item_id": "nvd:CVE-2026-65145",
   "description": "NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.",
   "title": "CVE-2026-65145",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65145",
   "source": "nvd",
   "published": "2026-10-27T13:16:59+00:00",
   "cve_ids": [
    "CVE-2026-65145"
   ],
   "cvss_v3": 10.0,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "NVIDIA NeMo Agent Toolkit に、攻撃者が認証の欠如(missing authentication)の問題を引き起こせる脆弱性が含まれていると説明されています。この脆弱性は、コード実行、権限昇格、データ改ざん、サービス拒否、情報漏えいにつながる可能性があるとされています。"
  },
  {
   "item_id": "nvd:CVE-2026-112362",
   "description": "@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes option enabled, the plugin matches path-scoped Express middleware against a URL whose duplicate-slash normalization has also collapsed the separator after an absolute-form request target's scheme, so Fastify's router resolves the request to the scoped path and runs the handler while the Express layer no longer sees that path. As a result, a request using an absolute-form target can reach a handler on a scoped route such as an admin path while the middleware for authentication, authorization, or rate limiting is skipped. An unauthenticated attacker needs only the non-default ignoreDuplicateSlashes option to be enabled. The issue is fixed in @fastify/express 4.0.9, and users should upgrade to 4.0.9 or later. As a workaround, enforce authentication in a Fastify hook such as preHandler that runs after the router resolves the request, or leave ignoreDuplicateSlashes at its default.",
   "title": "CVE-2026-112362",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112362",
   "source": "nvd",
   "published": "2026-10-27T12:17:04+00:00",
   "cve_ids": [
    "CVE-2026-112362"
   ],
   "cvss_v3": 9.1,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "@fastify/express のバージョン 4.0.5 から 4.0.8 では、デフォルトでない ignoreDuplicateSlashes オプションを有効にして Fastify を実行すると、絶対形式のリクエストターゲットのスキーム後の区切りも重複スラッシュの正規化で潰されます。その結果、Fastify のルーターはリクエストをスコープ付きパスに解決してハンドラーを実行しますが、Express 層はそのパスを認識しません。この問題は @fastify/express 4.0.9 で修正されており、回避策として、ルーター解決後に実行される preHandler などの Fastify フックで認証を行うか、ignoreDuplicateSlashes をデフォルトのままにする方法が示されています。"
  },
  {
   "item_id": "nvd:CVE-2026-117532",
   "description": "REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state and forge tokens for accounts like admin, gaining backend access and code execution outside live mode.",
   "title": "CVE-2026-117532",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-117532",
   "source": "nvd",
   "published": "2026-10-27T11:17:33+00:00",
   "cve_ids": [
    "CVE-2026-117532"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "REDAXO core の 5.3.0 から 5.21.4 より前のバージョンの structure/history プラグインに、認証バイパスの脆弱性が含まれている。認証されていない攻撃者が一時ログイントークンを偽造でき、セッションに結び付いた秘密情報を予測可能な状態にして admin などのアカウント用のトークンを偽造することで、バックエンドへのアクセスとライブモード外でのコード実行が可能になる。"
  },
  {
   "item_id": "nvd:CVE-2026-86577",
   "description": "Out-of-bounds Write Vulnerability in JP1 Products.\n\nThis issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.",
   "title": "CVE-2026-86577",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86577",
   "source": "nvd",
   "published": "2026-10-27T10:16:56+00:00",
   "cve_ids": [
    "CVE-2026-86577"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1製品に境界外書き込みの脆弱性があると発表されている。影響を受けるのは、JP1/Integrated Management 3 - Manager、JP1/Automatic Job Management System 3 の Manager・Agent・Agent Minimal Edition(いずれも13-00以上13-50-31未満)、およびJP1/Base(11-00以上12-50-54未満)である。"
  },
  {
   "item_id": "nvd:CVE-2026-86576",
   "description": "Heap-based Buffer Overflow Vulnerability in JP1 Products.\n\nThis issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.",
   "title": "CVE-2026-86576",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86576",
   "source": "nvd",
   "published": "2026-10-27T10:16:56+00:00",
   "cve_ids": [
    "CVE-2026-86576"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1製品にヒープベースのバッファオーバーフローの脆弱性がある。影響を受けるのは、JP1/Integrated Management 3 - Manager、JP1/Automatic Job Management System 3 の Manager、Agent、Agent Minimal Edition(いずれも13-00以上13-50-31未満)と、JP1/Base(11-00以上12-50-54未満)である。"
  },
  {
   "item_id": "nvd:CVE-2026-86575",
   "description": "Stack-based Buffer Overflow Vulnerability in JP1 Products.\n\nThis issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.",
   "title": "CVE-2026-86575",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86575",
   "source": "nvd",
   "published": "2026-10-27T10:16:56+00:00",
   "cve_ids": [
    "CVE-2026-86575"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1製品にスタックベースのバッファオーバーフローの脆弱性がある。影響を受けるのは、JP1/Integrated Management 3 - Manager、JP1/Automatic Job Management System 3 の Manager、Agent、Agent Minimal Edition(いずれも13-00以降13-50-31より前)、および JP1/Base(11-00以降12-50-54より前)である。"
  },
  {
   "item_id": "nvd:CVE-2026-82122",
   "description": "Stack-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.",
   "title": "CVE-2026-82122",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82122",
   "source": "nvd",
   "published": "2026-10-27T10:16:56+00:00",
   "cve_ids": [
    "CVE-2026-82122"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "CVE-2026-82122は、HiRDBにおけるスタックベースのバッファオーバーフローの脆弱性である。影響を受けるのは、HiRDB Server Version 10の10-00から10-12-01より前、HiRDB Server Version 9の09-00から09-66-22まで、HiRDB Server with Additional Function Version 9の09-00から09-66/Vまで、HiRDB Server Version 9(32)の09-02から09-66-22まで、HiRDB Server with Additional Function Version 9(32)の09-00から09-66-/Vまでである。"
  },
  {
   "item_id": "nvd:CVE-2026-82120",
   "description": "Heap-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.",
   "title": "CVE-2026-82120",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82120",
   "source": "nvd",
   "published": "2026-10-27T10:16:56+00:00",
   "cve_ids": [
    "CVE-2026-82120"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "HiRDBにヒープベースのバッファオーバーフローの脆弱性が存在する。影響を受けるのは、HiRDB Server Version 10の10-00から10-12-01より前、HiRDB Server Version 9の09-00から09-66-22まで、HiRDB Server with Additional Function Version 9の09-00から09-66/Vまでである。HiRDB Server Version 9(32)の09-02から09-66-22まで、HiRDB Server with Additional Function Version 9(32)の09-00から09-66-/Vまでも対象である。"
  },
  {
   "item_id": "nvd:CVE-2026-82119",
   "description": "OS Command Injection Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.",
   "title": "CVE-2026-82119",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82119",
   "source": "nvd",
   "published": "2026-10-27T10:16:56+00:00",
   "cve_ids": [
    "CVE-2026-82119"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "HiRDBにOSコマンドインジェクションの脆弱性があると公表されている。影響を受けるのは、HiRDB Server Version 10の10-00以降10-12-01より前、HiRDB Server Version 9の09-00から09-66-22まで、HiRDB Server with Additional Function Version 9の09-00から09-66/Vまでなど。HiRDB Server Version 9(32)の09-02から09-66-22まで、およびHiRDB Server with Additional Function Version 9(32)の09-00から09-66-/Vまでも対象とされている。"
  },
  {
   "item_id": "nvd:CVE-2026-86574",
   "description": "Heap-based Buffer Overflow Vulnerability in JP1/Base.\n\nThis issue affects JP1/Base: from 11-00 before 12-50-54.",
   "title": "CVE-2026-86574",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86574",
   "source": "nvd",
   "published": "2026-10-27T10:16:56+00:00",
   "cve_ids": [
    "CVE-2026-86574"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Baseにヒープベースのバッファオーバーフローの脆弱性があると説明されています。この問題は、JP1/Baseのバージョン11-00から12-50-54より前までに影響するとされています。"
  },
  {
   "item_id": "nvd:CVE-2026-76936",
   "description": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.",
   "title": "CVE-2026-76936",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76936",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-76936"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 に、スタックベースのバッファオーバーフローの脆弱性があると説明されています。対象は JP1/Automatic Job Management System 3 - Manager の 10-00 以降 13-50-31 より前のバージョンです。"
  },
  {
   "item_id": "nvd:CVE-2026-82118",
   "description": "Stack-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.",
   "title": "CVE-2026-82118",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82118",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-82118"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "CVE-2026-82118は、HiRDBにおけるスタックベースのバッファオーバーフローの脆弱性である。影響を受けるのは、HiRDB Server Version 10の10-00以上10-12-01未満、HiRDB Server Version 9の09-00から09-66-22まで、および追加機能付きや32ビット版を含む複数のVersion 9の製品である。"
  },
  {
   "item_id": "nvd:CVE-2026-82116",
   "description": "Missing Authentication for Critical Function Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.",
   "title": "CVE-2026-82116",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82116",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-82116"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "HiRDBに、重要な機能に対する認証が欠如している脆弱性(Missing Authentication for Critical Function)があるとされています。影響を受けるのは、HiRDB Server Version 10の10-00から10-12-01より前、Version 9の09-00から09-66-22まで、Additional Function付きVersion 9の09-00から09-66/Vまで、Version 9(32)の09-02から09-66-22まで、Additional Function付きVersion 9(32)の09-00から09-66-/Vまでです。"
  },
  {
   "item_id": "nvd:CVE-2026-76937",
   "description": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.",
   "title": "CVE-2026-76937",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76937",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-76937"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 に、ヒープベースのバッファオーバーフローの脆弱性があります。影響を受けるのは、Manager の 10-00 から 13-50-31 より前のバージョンです。"
  },
  {
   "item_id": "nvd:CVE-2026-76939",
   "description": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.",
   "title": "CVE-2026-76939",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76939",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-76939"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 にヒープベースのバッファオーバーフローの脆弱性がある。影響を受けるのは、Manager と Agent のいずれも、バージョン 11-00 から 13-50-31 より前のものである。"
  },
  {
   "item_id": "nvd:CVE-2026-82117",
   "description": "Authentication Bypass by Spoofing Vulnerability in HiRDB.\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.",
   "title": "CVE-2026-82117",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82117",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-82117"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "HiRDBに、なりすましによる認証回避の脆弱性があると説明されている。対象は、HiRDB Server バージョン10の10-00から10-12-01より前、バージョン9の09-00から09-66-22まで、およびAdditional Function付きやバージョン9(32)の各製品の一部のバージョンである。"
  },
  {
   "item_id": "nvd:CVE-2026-76935",
   "description": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.",
   "title": "CVE-2026-76935",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76935",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-76935"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 にスタックベースのバッファオーバーフローの脆弱性がある。この問題は、JP1/Automatic Job Management System 3 - Manager の 10-00 から 13-50-31 より前のバージョンに存在する。"
  },
  {
   "item_id": "nvd:CVE-2026-76938",
   "description": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.",
   "title": "CVE-2026-76938",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76938",
   "source": "nvd",
   "published": "2026-10-27T10:16:55+00:00",
   "cve_ids": [
    "CVE-2026-76938"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 に認証バイパスの脆弱性があると説明されています。影響を受けるのは JP1/Automatic Job Management System 3 - Manager の 10-00 から 13-50-31 より前のバージョンです。"
  },
  {
   "item_id": "nvd:CVE-2026-76933",
   "description": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.",
   "title": "CVE-2026-76933",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76933",
   "source": "nvd",
   "published": "2026-10-27T10:16:54+00:00",
   "cve_ids": [
    "CVE-2026-76933"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 にヒープベースのバッファオーバーフローの脆弱性があるとされています。対象は、Manager と Agent のいずれも、バージョン 11-00 以降 13-50-31 より前です。"
  },
  {
   "item_id": "nvd:CVE-2026-76932",
   "description": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.",
   "title": "CVE-2026-76932",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76932",
   "source": "nvd",
   "published": "2026-10-27T10:16:54+00:00",
   "cve_ids": [
    "CVE-2026-76932"
   ],
   "cvss_v3": 9.4,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 に、スタックベースのバッファオーバーフローの脆弱性があります。影響を受けるのは、Manager と Agent のどちらも 11-00 以降 13-50-31 より前のバージョンです。"
  },
  {
   "item_id": "nvd:CVE-2026-76934",
   "description": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.",
   "title": "CVE-2026-76934",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76934",
   "source": "nvd",
   "published": "2026-10-27T10:16:54+00:00",
   "cve_ids": [
    "CVE-2026-76934"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "JP1/Automatic Job Management System 3 にスタックベースのバッファオーバーフローの脆弱性があると説明されている。対象は、Manager と Agent のいずれも、バージョン 11-00 以降 13-50-31 より前である。"
  },
  {
   "item_id": "nvd:CVE-2026-92885",
   "description": "The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within the qode_membership_login_user_from_social_network function — the guard condition tests an undefined variable ($check_social_useqoder instead of $check_social_user), causing empty() to always return true and rendering the Graph API token verification branch dead code, leaving wp_set_auth_cookie() reachable with no credential or token validation whatsoever. This makes it possible for unauthenticated attackers to log in as any existing WordPress account — including Administrator-level accounts — by supplying a known or enumerated administrator login name (rather than an email address) in the response[email] parameter, which the fallback path in get_user_by('login', $email) resolves to the matching account. Exploitation does require harvesting a valid qode_validate_facebook_login nonce, but this nonce is rendered on any public front-end page containing the [qode_user_login] or [qode_user_register] shortcode and is therefore obtainable without any prior authentication.",
   "title": "CVE-2026-92885",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92885",
   "source": "nvd",
   "published": "2026-10-27T09:16:34+00:00",
   "cve_ids": [
    "CVE-2026-92885"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "WordPress用Qode Membershipプラグインの2.0.6.2までの全バージョンに、qode_membership_check_facebook_user AJAXアクションを経由する認証バイパスおよびアカウント乗っ取りの脆弱性がある。qode_membership_login_user_from_social_network関数内のFacebook OAuthトークン検証の条件式で、未定義の変数($check_social_useqoder)が誤って使われているため、トークン検証が実行されず、認証情報や検証なしにwp_set_auth_cookie()に到達できる。未認証の攻撃者は、response[email]パラメータに管理者のログイン名を指定することで、管理者を含む任意のアカウントとしてログインでき、その際に必要なqode_validate_facebook_loginのnonceは、[qode_user_login]または[qode_user_register]ショートコードを含む公開ページから取得できる。"
  },
  {
   "item_id": "nvd:CVE-2026-18450",
   "description": "The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.",
   "title": "CVE-2026-18450",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18450",
   "source": "nvd",
   "published": "2026-10-27T08:16:53+00:00",
   "cve_ids": [
    "CVE-2026-18450"
   ],
   "cvss_v3": 9.8,
   "severity": "CRITICAL",
   "reasons": [
    "CVSS 9.0 以上"
   ],
   "note": null,
   "summary": "BMCは、IPMIコマンドに対する完全性と暗号化の要件を正しく適用していない。攻撃者は、パケットを細工することで、アクティブなセッション上で任意のコマンドを実行できる可能性がある。"
  },
  {
   "item_id": "kev:CVE-2026-48356",
   "description": "",
   "title": "CVE-2026-48356(Adobe Commerce and Magento)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48356",
   "source": "kev",
   "published": "2026-10-27T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-48356"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-27)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-111497",
   "description": "",
   "title": "CVE-2026-111497(Google Brotli)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497",
   "source": "kev",
   "published": "2026-10-27T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-111497"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-27)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-109618",
   "description": "",
   "title": "CVE-2026-109618(PHP Group PHP)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109618",
   "source": "kev",
   "published": "2026-10-26T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-109618"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-26)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-109619",
   "description": "",
   "title": "CVE-2026-109619(PHP Group PHP)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109619",
   "source": "kev",
   "published": "2026-10-26T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-109619"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-26)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-114625",
   "description": "",
   "title": "CVE-2026-114625(Arista VeloCloud Orchestrator)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625",
   "source": "kev",
   "published": "2026-10-23T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-114625"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-23)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-110447",
   "description": "",
   "title": "CVE-2026-110447(Collabora Collabora Online – Built-in CODE Server)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447",
   "source": "kev",
   "published": "2026-10-23T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-110447"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-23)。",
   "summary": null
  },
  {
   "item_id": "google-security-blog:https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/",
   "description": "",
   "title": "Protecting Chrome and Android Users from Compromised eMudhra Intermediate CA Certificates",
   "url": "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/",
   "source": "google-security-blog",
   "published": "2026-10-20T19:49:00+00:00",
   "cve_ids": [],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "認証局の鍵の漏えい等(AI の一次判定)"
   ],
   "note": "AI による一次判定です。判定は変わることがあります。",
   "summary": "Chrome Root Program は、セキュリティ研究者から報告を受けました。報告は、eMudhra の下位認証局(subordinate Certification Authority)8つに関連する秘密鍵が侵害されたというものです。提供された説明文はここで途切れており、これ以上の内容は記載されていません。"
  },
  {
   "item_id": "kev:CVE-2026-106931",
   "description": "",
   "title": "CVE-2026-106931(EG Secure Solutions SiteGuard Server Edition)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931",
   "source": "kev",
   "published": "2026-10-20T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-106931"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-20)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-96656",
   "description": "",
   "title": "CVE-2026-96656(Plex Media Server)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656",
   "source": "kev",
   "published": "2026-10-20T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-96656"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-20)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-96655",
   "description": "",
   "title": "CVE-2026-96655(Plex Media Server)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655",
   "source": "kev",
   "published": "2026-10-20T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-96655"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-20)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-96654",
   "description": "",
   "title": "CVE-2026-96654(Plex Media Server)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654",
   "source": "kev",
   "published": "2026-10-20T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-96654"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-20)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-96652",
   "description": "",
   "title": "CVE-2026-96652(Plex Media Server)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652",
   "source": "kev",
   "published": "2026-10-20T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-96652"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-20)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-110936",
   "description": "",
   "title": "CVE-2026-110936(Siemens Software Center)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936",
   "source": "kev",
   "published": "2026-10-20T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-110936"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-20)。",
   "summary": null
  },
  {
   "item_id": "mozilla-ca-incidents:2083449",
   "description": "",
   "title": "eMudhra: Private key compromise of Intermediate Certificates",
   "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2083449",
   "source": "mozilla-ca-incidents",
   "published": "2026-10-18T12:06:03+00:00",
   "cve_ids": [],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "認証局の鍵の漏えい等(AI の一次判定)"
   ],
   "note": "AI による一次判定です。判定は変わることがあります。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-102764",
   "description": "",
   "title": "CVE-2026-102764(BeyondTrust Remote Support)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102764",
   "source": "kev",
   "published": "2026-10-16T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-102764"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-16)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2025-61624",
   "description": "",
   "title": "CVE-2025-61624(Fortinet Multiple Products)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61624",
   "source": "kev",
   "published": "2026-10-16T00:00:00+00:00",
   "cve_ids": [
    "CVE-2025-61624"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-16)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-21589",
   "description": "",
   "title": "CVE-2026-21589(Atlassian Multiple Products)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21589",
   "source": "kev",
   "published": "2026-10-15T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-21589"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-15)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-105134",
   "description": "",
   "title": "CVE-2026-105134(Ahsay AhsayCBS)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105134",
   "source": "kev",
   "published": "2026-10-14T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-105134"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-14)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-105133",
   "description": "",
   "title": "CVE-2026-105133(Ahsay AhsayCBS)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105133",
   "source": "kev",
   "published": "2026-10-14T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-105133"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-14)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-76519",
   "description": "",
   "title": "CVE-2026-76519(Cisco Secure Email Gateway)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76519",
   "source": "kev",
   "published": "2026-10-14T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-76519"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-14)。",
   "summary": null
  },
  {
   "item_id": "kev:CVE-2026-0322",
   "description": "",
   "title": "CVE-2026-0322(Palo Alto Networks PAN-OS)",
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322",
   "source": "kev",
   "published": "2026-10-14T00:00:00+00:00",
   "cve_ids": [
    "CVE-2026-0322"
   ],
   "cvss_v3": null,
   "severity": null,
   "reasons": [
    "悪用が確認されている(KEV 掲載)"
   ],
   "note": "CISA が KEV に追加したもの(追加日 2026-10-14)。",
   "summary": null
  }
 ]
}