CVE-2026-28267

CVSS 6.8 MEDIUMEPSS 0.1%CWE-276

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 mar 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Produtos afetados

Digital Arts Inc. · DigitalArts@Cloud Agent (for Windows)Digital Arts Inc. · i-FILTER ブラウザー＆クラウド MultiAgent for Windows Digital Arts Inc. · i-フィルター 10 (Windows version only)Digital Arts Inc. · i-フィルター 6.0 Digital Arts Inc. · i-フィルター for ZAQ (Windows version only)Digital Arts Inc. · i-フィルター for ネットカフェ Digital Arts Inc. · i-フィルター for プロバイダー Digital Arts Inc. · i-フィルター for マルチデバイス (Windows version only)Fujitsu Limited · i-FILTER Browser & Cloud MultiAgent for Windows Inventit Inc. · MobiConnect i-FILTER Browser Option MultiAgent for Windows OPTiM Corporation · Optimal Biz Web Filtering Powered by i-FILTER (Windows version)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://biz3.optim.co.jp/https://jvn.jp/en/jp/JVN17307628/https://sd.fjsd001.dfcenter.jp.fujitsu.com/portal/ja/kb/articles/windows%E3%81%AE%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%83%8E%E3%83%BC%E3%83%88 https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260309_01.pdf https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260309_02.pdf https://www.mobi-connect.net/file/ifilter/