https://kkm-mako.com/en/blog/articles/hermes-webui-cve/Canariien2026-07-09T22:39:48+00:00Popular AI Agent UI 'Hermes WebUI' Server-Takeover Flaw CVE-2026-58123 — No Password Needed, Plus API-Key Theft; Update Nowhttps://kkm-mako.com/blog/articles/hermes-webui-cve/Canariija2026-07-09T22:39:31+00:00人気AIエージェントUI『Hermes WebUI』にサーバー乗っ取りの脆弱性 CVE-2026-58123、パスワードなしで制圧・API鍵窃取の2件、最新版へ即更新をhttps://kkm-mako.com/en/blog/articles/userswp-cve/Canariien2026-07-09T19:38:30+00:00WordPress Member Plugin 'UsersWP' Site-Takeover Flaw CVE-2026-13492 — 20,000 Sites Should Update to v1.2.66 Nowhttps://kkm-mako.com/blog/articles/userswp-cve/Canariija2026-07-09T19:38:13+00:00WordPress会員プラグイン『UsersWP』にサイト乗っ取りの脆弱性 CVE-2026-13492、2万サイトはv1.2.66へ即更新をhttps://kkm-mako.com/en/blog/articles/metabase-cve/Canariien2026-07-09T18:42:16+00:00Analytics Tool 'Metabase' Server-Takeover Flaw CVE-2026-59827 Lets Ordinary Users Seize the Server — Update Nowhttps://kkm-mako.com/blog/articles/metabase-cve/Canariija2026-07-09T18:41:58+00:00データ分析ツール『Metabase』にサーバー乗っ取りの脆弱性 CVE-2026-59827、一般アカウントから社内サーバー制圧・最新版へ即更新をhttps://kkm-mako.com/en/blog/articles/adalo-cve/Canariien2026-07-09T15:41:50+00:00No-Code App Builder 'Adalo' Flaw CVE-2026-10706 Exposes User Data Across 1M+ Apps — No Patch Yet, Avoid Storing Sensitive Datahttps://kkm-mako.com/blog/articles/adalo-cve/Canariija2026-07-09T15:41:34+00:00ノーコードアプリ作成『Adalo』で利用者情報が他人に抜かれる脆弱性 CVE-2026-10706、100万アプリ対象・修正版なく保存に注意https://kkm-mako.com/blog/articles/server-side-gtm-guide/Canariija2026-07-09T13:14:04+00:00サーバーサイドGTMの導入価値と方法を、現役フリーランスエンジニアが解説https://kkm-mako.com/blog/articles/cve-digest-2026-07-09/Canariija2026-07-09T07:01:34+00:00【2026年7月9日】セキュリティ脆弱性まとめ ― CoreWCF・Bitwarden・Snowflakeなど7件、一般利用者への影響はhttps://kkm-mako.com/en/blog/articles/cline-cve/Canariien2026-07-09T00:16:26+00:00Popular AI Coding Tool Cline Hijackable by Any Website (CVE-2026-59723): Command Execution and API Key Theft — Update to 3.0.30https://kkm-mako.com/blog/articles/cline-cve/Canariija2026-07-09T00:16:10+00:00500万人が使うAIコーディングツール『Cline』に乗っ取りの脆弱性、悪意あるサイトを開くだけでPC操作やAPIキー窃取の恐れ CVE-2026-59723、3.0.30へ更新をhttps://kkm-mako.com/en/blog/articles/repomix-ssrf-cve/Canariien2026-07-08T17:18:59+00:00Critical SSRF in Repomix (CVE-2026-59702): The Popular AI Code-Packing Tool's Server Could Leak Cloud Keys — Update to 1.14.1https://kkm-mako.com/blog/articles/repomix-ssrf-cve/Canariija2026-07-08T17:18:43+00:00AIにコードを渡す人気ツール『Repomix』に深刻な脆弱性、公開サーバーが踏み台にされ内部情報流出の恐れ CVE-2026-59702、1.14.1へ更新をhttps://kkm-mako.com/en/blog/articles/fortinet-fortisandbox-cve/Canariien2026-07-08T05:41:38+00:00Fortinet FortiSandbox Has Four No-Login Takeover Flaws (CVE-2026-39808 and More): Some Exploited — Update Nowhttps://kkm-mako.com/blog/articles/fortinet-fortisandbox-cve/Canariija2026-07-08T05:41:21+00:00マルウェアを見張る防御装置Fortinet FortiSandboxに無認証で乗っ取りの脆弱性4件 CVE-2026-39808ほか、一部は悪用確認で即更新をhttps://kkm-mako.com/en/blog/articles/citrix-netscaler-cve/Canariien2026-07-08T05:34:20+00:00Citrix NetScaler Leaks Data Before Login (CVE-2026-8451): 'CitrixBleed' Is Back and Under Active Attackhttps://kkm-mako.com/blog/articles/citrix-netscaler-cve/Canariija2026-07-08T05:34:03+00:00社外から社内につなぐ装置Citrix NetScalerにログイン前でも情報を抜かれる脆弱性 CVE-2026-8451、『CitrixBleed』再来で悪用中https://kkm-mako.com/en/blog/articles/oracle-ebs-cve/Canariien2026-07-08T05:25:40+00:00Oracle E-Business Suite Can Be Hijacked Without a Password (CVE-2026-46817): Actively Exploited, Patch Nowhttps://kkm-mako.com/blog/articles/oracle-ebs-cve/Canariija2026-07-08T05:25:24+00:00企業の基幹業務ソフト『Oracle EBS』にパスワード不要でサーバー乗っ取りの脆弱性 CVE-2026-46817、悪用が始まり即更新をhttps://kkm-mako.com/en/blog/articles/cve-digest-2026-07-07/Canariien2026-07-08T05:15:35+00:00July 7, 2026 Security Vulnerability Roundup: Dell, Red Hat, Kubernetes Infra and More — Does It Affect You?https://kkm-mako.com/blog/articles/cve-digest-2026-07-07/Canariija2026-07-08T05:15:16+00:00【2026年7月7日】セキュリティ脆弱性まとめ ― Dell・Red Hat・Kubernetes基盤など6件、一般利用者への影響はhttps://kkm-mako.com/en/blog/articles/cve-digest-2026-07-08/Canariien2026-07-08T05:14:22+00:00July 8, 2026 Security Vulnerability Roundup: Plesk, ArcGIS, Self-Hosted AI Tools and More — Does It Affect You?https://kkm-mako.com/blog/articles/cve-digest-2026-07-08/Canariija2026-07-08T05:14:06+00:00【2026年7月8日】セキュリティ脆弱性まとめ ― CVSS9.0以上の「重大」19件、一般利用者への影響は