2026年10月9日の
セキュリティ情報

Subject: [Security Advisory] HPE Intelligent Management Center CVE-2026-79842

Dear IT Administration Team,

We are sharing information regarding a critical vulnerability in HPE Intelligent Management Center (iMC).

■ Overview
An authentication bypass vulnerability (CVE-2026-79842) has been identified. This flaw could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the system.

■ Scope
- Product: HPE Intelligent Management Center (iMC)
- Affected Versions: Versions prior to 7.3 E0713

■ Mitigation Steps
1. Verify the current version of your iMC installation.
2. If the version is affected, apply the latest security updates provided by the vendor.

■ Reference
- HPE Official Advisory: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05157en_us

Priority: High
Deadline: Immediate

Subject: [Security Advisory] IBM Security Verify Access / Verify Identity Access Vulnerabilities

Dear IT/Security Team,

This is a notification regarding critical vulnerabilities identified in IBM security products.

■ Overview
IBM has addressed 22 vulnerabilities in Security Verify Access and Verify Identity Access. These include critical flaws allowing Remote Code Execution (RCE), authentication bypass, and arbitrary file writes. 5 vulnerabilities are rated 'Critical' and 5 are rated 'High'.

■ Affected Scope
- IBM Security Verify Access / Verify Identity Access 10.0.x (v10.0.9.2 and earlier)
- IBM Security Verify Access / Verify Identity Access 11.0.x (v11.0.3 and earlier)
- Container versions of the above products

■ Mitigation Steps
1. Verify the current version of the installed products.
2. Apply the latest security updates as specified in the IBM security bulletin.

■ Reference
- IBM Security Bulletins

Priority: High
Deadline: Immediate

Subject: [Security Advisory] MongoDB Go Driver / libmongocrypt Vulnerabilities

Dear IT/Security Team,

This is a notification regarding security updates for MongoDB components.

■ Overview
Multiple vulnerabilities have been identified in the MongoDB Go Driver and libmongocrypt library. Four of these are classified as 'High' severity and could lead to a Denial of Service (DoS) condition.

■ Affected Scope
- MongoDB Go Driver: Versions prior to 2.9.2
- libmongocrypt: Versions prior to 1.20.5

■ Mitigation Steps
1. Verify the current versions of the libraries used in your environment.
2. Update to the following versions or later:
- Go Driver: 2.9.2
- libmongocrypt: 1.20.5

■ Reference
- MongoDB Official Security Bulletins

Priority: High
Deadline: As soon as possible

Subject: [Security Advisory] Dell Secure Connect Gateway Policy Manager Vulnerabilities

Dear IT Administration Team,

We are sharing critical vulnerability information regarding Dell Secure Connect Gateway (SCG) Policy Manager.

■ Overview
Multiple vulnerabilities have been identified in Dell SCG Policy Manager, including 18 'High' severity flaws. These vulnerabilities could potentially allow Remote Code Execution (RCE), authentication bypass, elevation of privilege, arbitrary file operations, Denial of Service (DoS), and information disclosure.

■ Scope
- Product: Dell Secure Connect Gateway (SCG) Policy Manager
- Affected Versions: Prior to 5.34.00.16

■ Mitigation Steps
1. Verify the current version of your SCG Policy Manager installation.
2. If the version is older than 5.34.00.16, immediately update to the latest version as per the vendor's security bulletin.

■ Reference
- Dell Official Security Advisory

Priority: High
Deadline: Immediate