3日 水曜日、先負

+ RHSA-2026:22643 Important: thunderbird security update

https://access.redhat.com/errata/RHSA-2026:22643

CVE-2026-8388

CVE-2026-8391

CVE-2026-8401

CVE-2026-8946

CVE-2026-8947

CVE-2026-8950

CVE-2026-8953

CVE-2026-8954

CVE-2026-8955

CVE-2026-8956

CVE-2026-8957

CVE-2026-8958

CVE-2026-8959

CVE-2026-8961

CVE-2026-8962

CVE-2026-8968

CVE-2026-8970

CVE-2026-8974

CVE-2026-8975

+ Mozilla Firefox 151.0.3 released

https://www.firefox.com/en-US/firefox/151.0.3/releasenotes/

+ Mozilla Foundation Security Advisory 2026-54 Security Vulnerabilities fixed in Firefox 151.0.3

https://www.mozilla.org/en-US/security/advisories/mfsa2026-54/

CVE-2026-10701

CVE-2026-10702

+ Zabbix 7.4.11, 7.0.27 released

https://www.zabbix.com/rn/rn7.4.11

https://www.zabbix.com/rn/rn7.0.27

+ ProFTPD 1.3.9b released

http://www.proftpd.org/docs/NEWS-1.3.9b

http://www.proftpd.org/docs/RELEASE_NOTES-1.3.9b

+ JVNVU#90461576 Windowsカーネルドライバ「PCTCore64.sys」における不適切なアクセス制御

https://jvn.jp/vu/JVNVU90461576/index.html

CVE-2026-8501

VU#615987 Missing IPsec Integrity Protection for IMS SIP Signaling in Verizon VoLTE Deployments

https://www.kb.cert.org/vuls/id/615987

VU#265691 Appsmiths SQL Query autocomplete renderer contains a cross site scripting vulnerability

https://www.kb.cert.org/vuls/id/265691

VU#873170 Collibra Agent contains improper authentication and path traversal vulnerabilities

https://www.kb.cert.org/vuls/id/873170

最新セキュリティ事情と対策 第3回

Webサイトに潜む「わな」、サポート詐欺から正規サイト改ざんまで

https://xtech.nikkei.com/atcl/nxt/column/18/03598/042000003/?ST=nxt_thmit_security

JVNVU#95687008 TP-Link製ルーターArcher BE450およびBE7200におけるOSコマンドインジェクションの脆弱性

https://jvn.jp/vu/JVNVU95687008/index.html