2026年8月4日の
セキュリティ情報

Subject: [Security Advisory] Canon PRISMAproduction CVE-2026-3245

Dear IT/Security Team,

We are sharing information regarding a vulnerability in Canon PRISMAproduction.

■ Overview
A high-severity vulnerability (CVE-2026-3245) has been discovered in Canon PRISMAproduction. It allows an unauthenticated attacker on an adjacent network to execute arbitrary code on the system.

■ Scope
- Product: Canon PRISMAproduction
- Affected Versions: 6.5 and earlier

■ Mitigation Steps
1. Verify the current version of PRISMAproduction in your environment.
2. If a vulnerable version is in use, update to the latest version as per the vendor's security bulletin.

■ Reference
- https://psirt.canon/advisory-information/cp2026-007/

Priority: High
Deadline: Immediate

Subject: [Security Alert] Malicious npm Packages Targeting Alibaba Tool Users

Dear IT/Security Team,

We are sharing information regarding a supply chain attack involving malicious npm packages.

■ Overview
Eighteen malicious npm packages have been identified targeting users of Alibaba developer tools. These packages employ typosquatting (e.g., 'lib-mtop' mimicking '@ali/lib-mtop') to deploy a cross-platform RAT. The malware uses a loader to fetch and execute a remote JavaScript payload via curl.

■ Scope
- Environments utilizing Alibaba developer tools and npm packages.
- Specifically, those who may have accidentally installed unscoped packages like 'lib-mtop'.

■ Action Plan
1. Audit package.json and lock files for unauthorized or suspicious packages (e.g., lib-mtop).
2. Monitor development environments for suspicious outbound HTTP requests initiated by curl to unknown domains.
3. Ensure that only verified, scoped packages (e.g., @ali/...) are used in production and development pipelines.

■ Reference
- Source: hackernews

Priority: Medium
Deadline: Immediate review

Subject: [Security Advisory] N-able N-central CVE-2026-18577 Remediation

Dear IT/Security Team,

This is a notification regarding a critical vulnerability in N-able N-central.

■ Overview
CVE-2026-18577 is an authentication bypass vulnerability that allows attackers to gain full control of the asset via an alternate path or channel. CISA has added this to the KEV catalog due to active exploitation in the wild.

■ Scope
- Affected Product: N-able N-central

■ Action Plan
1. Apply the latest security patches provided by N-able immediately.
2. Review system logs to determine if the system was compromised prior to patching.

■ Reference
- CISA Known Exploited Vulnerabilities (KEV) Catalog

Priority: High
Deadline: Immediate

Subject: [Urgent] SonicWall CVE-2026-15409/15410 Remediation

Dear IT/Security Team,

This is a critical update regarding vulnerabilities in SonicWall products.

■ Overview
Two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, are being actively exploited by the INC ransomware group. Chaining these vulnerabilities allows attackers to gain full system access.

■ Scope
- Affected Products: SonicWall devices/software (Please refer to the vendor advisory for specific versions).

■ Action Plan
1. Verify the current firmware/software version of your SonicWall appliances.
2. Immediately apply the security patches released on July 14.

■ Reference
- SonicWall Official Security Advisory

Priority: High
Deadline: Immediate

Subject: [Security Advisory] cPanel/WHM CVE-2026-58048 Mitigation

Dear Team,

We are sharing critical information regarding a vulnerability in cPanel/WHM.

■ Overview
CVE-2026-58048 is a critical flaw (CVSS 9.4) that allows an authenticated cPanel user to execute arbitrary SQL commands with full administrative (root) privileges. Depending on the system configuration, this may lead to a full OS-level compromise.

■ Scope
- All supported versions of cPanel & WHM
- WP Squared

■ Action Plan
1. Immediately update cPanel/WHM to the latest patched version.
2. Review database logs for any unauthorized administrative queries.

■ Reference
- Official cPanel Security Advisory

Priority: High
Deadline: Immediate