2026年8月18日の
セキュリティ情報

Subject: [Security Advisory] Nodemailer File Read/SSRF Vulnerability

Dear IT/Security Team,

We are sharing information regarding a vulnerability found in the Nodemailer library.

■ Overview
In Nodemailer versions <= 9.0.0, the MailComposer.compile() function does not correctly thread the disableFileAccess and disableUrlAccess flags. This allows an attacker to bypass these security controls via the 'raw' option, leading to arbitrary file reads or Server-Side Request Forgery (SSRF).

■ Scope
- Product: Nodemailer
- Affected Versions: <= 9.0.0

■ Remediation
1. Identify all applications utilizing the affected Nodemailer versions.
2. Update the library to version 9.0.1 or later immediately.

■ Reference
- GitHub Advisory: GHSA-p6gq-j5cr-w38f
- Vendor Homepage: https://github.com/nodemailer/nodemailer

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Progress ShareFile Storage Zones Controller Vulnerabilities

Dear IT/Security Team,

We are sharing information regarding high-severity vulnerabilities identified in Progress ShareFile Storage Zones Controller.

■ Overview
Three high-severity vulnerabilities have been reported that could allow an attacker to achieve remote code execution (RCE), bypass security validation, and perform arbitrary file writes.

■ Affected Scope
- Progress ShareFile Storage Zones Controller v6 (versions prior to 6.0.3)
- Progress ShareFile Storage Zones Controller v5 (versions prior to 5.12.6)

■ Mitigation Steps
1. Verify the current version of the installed software.
2. Update the product to version 6.0.3 or 5.12.6 (or later) as per the vendor's security bulletin.

■ Reference
- Progress Software Official Security Advisory

Priority: High
Deadline: Immediate action recommended

Subject: [Intel] Advanced Communication Techniques in Cavern C2 Framework

Dear team,

We are sharing intelligence regarding the evolution of the Cavern C2 framework used by Iranian state-sponsored actors.

■ Overview
The Cavern C2 framework now utilizes a complex module that leverages DNS A-record responses to dynamically switch between direct HTTPS communication and a Google Apps Script relay. This allows the threat actor to blend C2 traffic with legitimate Google services and rotate relay IDs to evade detection.

■ Scope
- Targets: Primarily entities in Israel
- Protocols: DNS, HTTPS (via Google Apps Script)

■ Recommended Actions
1. Monitor outbound traffic to script.google.com for anomalous patterns.
2. Enhance monitoring for suspicious DNS A-record queries that may be used for C2 channel rotation.
3. Implement behavioral monitoring on endpoints to detect the loading of unauthorized C2 modules.

■ Reference
- Kaspersky Analysis

Priority: Medium
Deadline: Ongoing Monitoring

Subject: [Security Advisory] Forminator Vulnerability (CVE-2026-15748) Mitigation

Dear IT/Security Team,

We are sharing information regarding a critical vulnerability in the Forminator WordPress plugin.

■ Overview
An arbitrary file upload vulnerability (CVE-2026-15748) has been identified in Forminator, with a CVSS score of 9.8. This flaw allows unauthenticated attackers to upload malicious PHP files, potentially leading to Remote Code Execution (RCE) and full site compromise.

■ Scope
- Product: Forminator WordPress Plugin
- Affected Versions: 1.56.1 and earlier
- Prerequisite: The site must have a form containing both a File Upload field and a Select field.

■ Mitigation Steps
1. Verify the installed version of the Forminator plugin.
2. Update the plugin to version 1.56.2 or later immediately.

■ Reference
- Wordfence Security Report

Priority: High
Deadline: Immediate

Subject: [Security Advisory] BeyondTrust Endpoint Privilege Management Vulnerabilities

Dear IT/Security Team,

We are sharing information regarding vulnerabilities identified in BeyondTrust Endpoint Privilege Management (Windows Deployment).

■ Overview
Two high-severity vulnerabilities (CVE-2026-40145, CVE-2026-40144) have been disclosed. These flaws could allow a local attacker to execute arbitrary code or elevate privileges on the target system.

■ Scope
- Product: BeyondTrust Endpoint Privilege Management (Windows Deployment)
- Affected Versions: All versions prior to 26.1.2

■ Mitigation Steps
1. Verify the current version of the installed software.
2. Update to version 26.1.2 or later to remediate these vulnerabilities.

■ Reference
- BeyondTrust Trust Center: https://www.beyondtrust.com/trust-center/security

Priority: High
Deadline: As soon as possible