2026年8月17日の
セキュリティ情報

Subject: [Security] SAP August 2026 Security Update (AV26-798) Implementation

Dear IT Administration Team,

SAP has released the August 2026 monthly security rollup (AV26-798) to address vulnerabilities in several core products.

■ Overview
This update provides critical security fixes for multiple SAP components to prevent potential exploitation.

■ Affected Scope
- SAP Commerce Cloud (Data Hub Adapter, OM_CLOUD, DHUB_CLOUD)
- SAP Manufacturing Integration and Intelligence (MII, XMII, MII_ADMIN)
- SAP NetWeaver / ABAP Platform (Various KERNEL versions)
- SAP Change and Transport System Attach Tool (ctsattach)
- SAP ABAP Developer Tools (SAP_BASIS versions)
- SAP BusinessObjects Business Intelligence Platform (CMS)

■ Action Plan
1. Identify the specific SAP products and versions currently deployed in the environment.
2. Review the individual security notes associated with advisory AV26-798 via the SAP Support Portal.
3. Test and deploy the relevant patches in a staging environment before moving to production.

■ Reference
- SAP Security Advisory AV26-798

Priority: High
Deadline: Next scheduled maintenance window

Subject: [Security Advisory] SonicWall Email Security CVE-2026-66149/66150

Dear Team,

Please be advised of the following vulnerabilities affecting SonicWall Email Security.

■ Overview
Two code injection vulnerabilities (CVE-2026-66149 and CVE-2026-66150) have been identified. These flaws allow an authenticated user via the command-line interface to execute arbitrary OS commands with root privileges. Both vulnerabilities have a CVSSv3.0 base score of 7.8 (High).

■ Scope
- Product: SonicWall Email Security
- CVEs: CVE-2026-66149 (netmask processing), CVE-2026-66150 (SNMP processing)

■ Mitigation
1. Verify the current version of the installed software.
2. Update to version 10.0.36 or later to resolve these vulnerabilities.

■ Reference
- SonicWall Security Advisory (SNWLID-2026-0012)

Priority: High
Deadline: Immediate

Subject: [Security Alert] Account Theft via Fake Recruitment/Interview Invitations

Dear employees,

We would like to alert you to a global phishing campaign that uses fake job offers and interview scheduling pages to steal Google and Facebook credentials.

These attacks often use a technique called "Browser-in-the-Browser (BitB)," which creates a fake login window that looks identical to a real one, making it very difficult to detect.

Requested Actions:
1. Do not click on recruitment links or interview invitations from unknown or untrusted sources.
2. Carefully verify the URL in the address bar before entering your credentials on any login page.
3. If you suspect you have entered your password into a fraudulent site, change your password immediately and notify the IT security team.

Deadline: Immediate

Subject: [Urgent] VMware vCenter Server CVE-2026-59310 Remediation

Dear IT/Security Team,

We are sharing critical information regarding a vulnerability in VMware vCenter Server.

■ Overview
A severe directory-traversal vulnerability (CVE-2026-59310) has been identified in VMware vCenter Server, allowing for arbitrary code execution (CVSS 9.8). Active exploitation by a suspected China-nexus APT actor has been observed, leading to the deployment of Babuk-derived ransomware.

■ Scope
- Affected Product: VMware vCenter Server

■ Action Required
1. Verify the current version of your vCenter Server instances.
2. Apply the security patch released by Broadcom on July 29, 2026, to update to the latest secure version.

■ Reference
- Broadcom Official Security Advisory

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Data Leakage Risk via Microsoft Power Pages Misconfiguration

Dear IT/Security Team,

We are sharing information regarding a recent breach involving the threat actor "ExfilSquad."

■ Overview
ExfilSquad has reportedly targeted organizations by exploiting misconfigured Microsoft Power Pages to gain unauthorized access to CRM environments and exfiltrate data.

■ Scope
- Environments utilizing Microsoft Power Pages and Dynamics 365 with improper access control settings.

■ Recommended Actions
1. Review Power Pages site settings and Web Role permissions to ensure no unintended public exposure exists.
2. Audit CRM access logs for any suspicious data export activities or anomalous traffic patterns.
3. Use configuration management tools to verify that cloud environment settings align with security baselines.

■ Reference
- Reports by Resecurity and VenariX

Priority: Medium
Deadline: Next scheduled security review