2026年6月26日の
セキュリティ情報

Subject: [Security Advisory] OpenDJ CVE-2026-46495 Remediation

Dear IT Administration Team,

We are sharing critical vulnerability information regarding OpenDJ.

■ Overview
A critical remote code execution (RCE) vulnerability (CVE-2026-46495) has been identified in OpenDJ due to the deserialization of untrusted data. It has a CVSSv4.0 base score of 9.2 (Critical), allowing unauthenticated attackers to execute arbitrary code.

■ Scope
- Product: OpenDJ
- Condition: Environments where 'JMX Connection Handler' is enabled and the 'JMX RMI connector' is accessible.

■ Remediation Steps
1. Verify the current version of OpenDJ in use.
2. Update to version 5.1.1 or later immediately.

■ Reference
- GitHub: OpenIdentityPlatform/OpenDJ

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Linux Kernel CVE-2026-43503 (DirtyClone) Mitigation

Dear IT/Security Team,

We are sharing information regarding a critical privilege escalation vulnerability in the Linux kernel known as "DirtyClone."

■ Overview
CVE-2026-43503 (CVSS 8.8) allows a local attacker to gain root privileges by corrupting file-backed memory. The vulnerability stems from the dropping of safety flags during network packet cloning, which can be exploited via a controlled IPsec tunnel to overwrite privileged binary checks in memory.

■ Scope
- Linux kernels lacking the patch merged on May 21, 2026.

■ Mitigation Steps
1. Verify the current kernel version across all Linux assets.
2. Update to the latest patched kernel version immediately.
3. Reboot affected systems to apply the changes.

■ Reference
- JFrog Security Research exploit walkthrough

Priority: High
Deadline: Immediate

Subject: [Security Alert] Joomla SP Page Builder CVE-2026-48908 Remediation

Dear IT/Security Team,

We are sharing critical information regarding a vulnerability in the Joomla SP Page Builder plugin.

■ Overview
An unauthenticated Remote Code Execution (RCE) vulnerability (CVE-2026-48908) has been identified and is being actively exploited in the wild. The vulnerability has a CVSS v3.1 score of 10.0.

■ Scope
- Affected Product: Joomla! SP Page Builder Plugin
- Vulnerable Endpoint: /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon

■ Remediation Steps
1. Verify if the SP Page Builder plugin is installed on any managed servers.
2. If present, immediately update the plugin to the latest patched version provided by the vendor.

■ Reference
- CSIRT-ITA Alert AL01/260626/CSIRT-ITA

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Linux Kernel Privilege Escalation (CVE-2026-46331)

Dear IT Administration Team,

We are sharing information regarding a critical privilege escalation vulnerability in the Linux kernel.

■ Overview
An out-of-bounds write vulnerability nicknamed "pedit COW" (CVE-2026-46331) has been identified in the traffic-control subsystem (act_pedit). This flaw allows a local unprivileged user to poison cached setuid root binaries in memory, granting root access while bypassing disk-based file integrity checks.

■ Scope
- Affected: Linux Kernel
- Conditions: Systems where act_pedit is loadable and unprivileged user namespaces are enabled (confirmed on RHEL and Debian).

■ Mitigation Steps
1. Apply the latest kernel security patches provided by your OS vendor.
2. Consider disabling unprivileged user namespaces if they are not required for your environment.

■ Reference
- CVE-2026-46331

Priority: High
Deadline: Immediate

Subject: [Security Alert] Dell Wyse Management Suite (WMS) Vulnerabilities (CVE-2026-41120 / CVE-2026-49506)

Dear IT Administration Team,

We are sharing critical vulnerability information regarding Dell Wyse Management Suite (WMS).

■ Overview
Two vulnerabilities have been identified in Dell WMS that could allow remote code execution. CVE-2026-41120 is particularly severe with a CVSS v3.1 base score of 9.8 (Critical).

■ Scope
- Affected Product: Dell Wyse Management Suite (WMS)
- Fixed Version: 5.5 HF1 and later

■ Action Required
1. Verify the current version of your WMS installation.
2. Update the software to version 5.5 HF1 or later immediately.

■ Reference
- Dell Security Advisory (DSA-2026-225)

Priority: High
Deadline: Immediate