2026年9月3日の
セキュリティ情報

Subject: [Security Advisory] Vulnerabilities in Cisco Nexus 9000 / IOS XR / IP Phones

Dear IT Administration Team,

This is a notification regarding security vulnerabilities affecting several Cisco products.

■ Overview
Multiple vulnerabilities have been identified in Cisco products, including a Remote Code Execution (RCE) vulnerability in Nexus 9000 Series Switches and Denial of Service (DoS) vulnerabilities in various IP and Video Phone models.

■ Affected Scope
- Cisco Nexus 9000 Series Switches (Silicon One)
- Cisco IOS XR Software
- Cisco Desk Phone 9800 Series, Video Phone 8875, and IP Phone series (7800, 8800, 8845, 8865, 8821) using SIP Software

■ Action Plan
1. Identify the current versions of the affected hardware and software in your environment.
2. Review the official Cisco Security Advisories and apply the recommended software updates.

■ Reference
- Cisco Security Advisories (AV26-876)

Priority: High
Deadline: Please review immediately and schedule updates for the next maintenance window.

Subject: [Security Advisory] F5 Products (BIG-IP, BIG-IQ, NGINX) Vulnerability Mitigation

Dear Team,

This is a notification regarding security vulnerabilities identified in F5 products.

■ Overview
Vulnerabilities have been reported affecting BIG-IP, BIG-IQ, NGINX products, and APM clients. Please refer to the vendor's security notification for technical details.

■ Affected Scope
- BIG-IP (all modules): Prior to 17.1.3.4, 17.5.1.8, 21.0.0.3, 21.1.0.1
- BIG-IQ: Prior to 8.4.2.1
- NGINX Gateway Fabric: Prior to 2.6.8
- NGINX Ingress Controller: Prior to 2026-lts-r5, 5.6.0
- NGINX JavaScript: Prior to 1.0.1
- APM Clients: Prior to 7.2.6
- BIG-IP APM: Multiple versions

■ Mitigation Steps
1. Verify the current versions of F5 products deployed in our environment.
2. If affected, update to the latest patched versions as recommended by the vendor.

■ Reference
- F5 Security Notification K000162872

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Jenkins and Plugin Vulnerabilities (AV26-877)

Dear IT Administration Team,

This is a notification regarding the Jenkins security advisory AV26-877.

■ Overview
Vulnerabilities have been identified in the Jenkins core and a wide array of its plugins.

■ Scope
- Jenkins Core: All versions except 2.568.3 and 2.580
- Affected Plugins:
- Allure, Customizable Header, File Parameter, GitLab, LDAP, Microsoft Entra ID, Parameterized Remote Trigger, Performance, Pipeline: Build Step, SAML, Script Security, TICS, ThinBackup, XebiaLabs XL Deploy
- update-center2 (Prior to or equal to 3.18.3)

■ Action Plan
1. Audit the current version of Jenkins and all installed plugins in your environment.
2. Update Jenkins and the affected plugins to the latest patched versions immediately.

■ Reference
- CCCS Security Advisory AV26-877

Priority: High
Deadline: Immediate

Subject: [Security Advisory] SUSE Rancher Vulnerability Update

Dear IT Administration Team,

This is a notification regarding vulnerabilities identified in SUSE Rancher.

■ Overview
Vulnerabilities have been found in SUSE Rancher versions prior to 2.15.1. Please refer to the vendor's advisory for technical details.

■ Scope
- Product: Rancher
- Affected Versions: Prior to 2.15.1

■ Remediation Steps
1. Verify the current version of Rancher in your environment.
2. Update to the latest version (v2.15.1 or later) to resolve the vulnerabilities.

■ Reference
- Release v2.15.1 · rancher/rancher · GitHub
- SUSE Update Advisories

Priority: High
Deadline: Immediate