2026年10月13日の
セキュリティ情報

Subject: [Action Required] Update Your Browser and Software

Hi everyone,

It has been reported that critical vulnerabilities have been fixed in major software, including Google Chrome.

What we need you to do:
1. Please update your web browsers (e.g., Google Chrome) to the latest version.
2. If you see any update notifications for tools or apps used within the company, please apply them immediately.

Deadline: By the end of this week

Subject: [Security Advisory] Progress MarkLogic Server Vulnerability Remediation

Dear IT/Security Team,

We are sharing information regarding critical vulnerabilities discovered in Progress Software's MarkLogic Server.

■ Overview
Thirty-one vulnerabilities have been disclosed, including five critical flaws. Two of these could allow an account with limited management privileges to escalate to full, persistent administrator control of the server.

■ Affected Versions
- MarkLogic 11.x before 11.3.7
- MarkLogic 12.x before 12.1.0

■ Remediation Steps
1. Verify the current version of your MarkLogic Server installation.
2. Upgrade to the following patched versions:
- For 11.x users: Upgrade to 11.3.7
- For 12.x users: Upgrade to 12.1.0

■ Reference
- Progress Software Official Advisory

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Vulnerabilities in IBM Products

Dear IT Administration Team,

We are sharing information regarding multiple vulnerabilities identified in several IBM products.

■ Overview
IBM has reported 35 vulnerabilities, including 4 Critical and 31 High severity flaws. These could potentially allow arbitrary code execution, authentication bypass, and privilege escalation.

■ Affected Scope
- IBM Aspera Enterprise WebApps
- IBM DataStage on Cloud Pak for Data
- IBM Db2 / Db2 Mirror for i
- IBM i
- IBM Maximo AI Service / Application Suite / IoT Component / Location Service for Esri
- IBM Planning Analytics
- IBM PowerVM Hypervisor
- IBM TRIRIGA Application Platform

■ Mitigation Steps
1. Identify the versions of the aforementioned products currently in use within our environment.
2. Apply the latest security patches or update to the fixed versions as specified in the IBM security bulletins.

■ Reference
- IBM Official Security Bulletins

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Progress ShareFile Storage Zones Controller CVE-2026-93695

Dear IT/Security Team,

We are sharing information regarding vulnerabilities identified in Progress ShareFile Storage Zones Controller.

■ Overview
Three vulnerabilities have been patched, including a high-severity flaw (CVE-2026-93695) that allows arbitrary file writes and potential remote code execution (RCE) under specific conditions.

■ Scope
- Product: Progress ShareFile Storage Zones Controller
- Affected Versions: Prior to 5.12.7

■ Mitigation Steps
1. Verify the current version of the installed software.
2. Update to version 5.12.7 or later immediately following the vendor's security bulletin.

■ Reference
- Progress Software Official Security Advisory

Priority: High
Deadline: Immediate

Subject: [Action Required] Ivanti Connect Secure Vulnerability Remediation

Dear IT/Security Team,

This is a notification regarding a vulnerability in Ivanti Connect Secure.

■ Overview
A vulnerability has been disclosed affecting limited versions of Ivanti Connect Secure. Ivanti has confirmed limited exploitation in the wild, necessitating immediate remediation.

■ Scope
- Affected Product: Ivanti Connect Secure (limited versions)

■ Remediation Steps
1. Review the official Security Advisory to determine if your current version is impacted.
2. Upgrade to the fixed version as soon as possible.
3. Regularly run the Integrity Checker Tool to ensure system integrity.

■ Reference
- Ivanti Official Security Advisory

Priority: High
Deadline: Immediate