https://kkm-mako.com/en/blog/articles/openshift-ai-cve/Canariien2026-07-23T12:17:01+00:00Red Hat OpenShift AI: in-cluster pods can impersonate any user (CVE-2026-16745)https://kkm-mako.com/blog/articles/openshift-ai-cve/Canariija2026-07-23T12:16:44+00:00Red Hat OpenShift AIに管理者なりすましの穴 CVE-2026-16745、3.5へ更新をhttps://kkm-mako.com/en/blog/articles/wordpress-plugins-2026-07-23-critical-vulnerabilities-roundup/Canariien2026-07-23T11:09:56+00:00Four WordPress plugins hit by critical site-takeover flaws (July 23)https://kkm-mako.com/blog/articles/wordpress-plugins-2026-07-23-critical-vulnerabilities-roundup/Canariija2026-07-23T11:09:45+00:00WordPressプラグイン4件に緊急の脆弱性、サイト乗っ取りの恐れhttps://kkm-mako.com/en/blog/articles/fastjson-cve/Canariien2026-07-23T10:11:26+00:00Fastjson RCE (CVE-2026-16723) puts Spring Boot apps at risk — act nowhttps://kkm-mako.com/blog/articles/fastjson-cve/Canariija2026-07-23T10:11:15+00:00Fastjsonに乗っ取りの穴 CVE-2026-16723、Javaの定番部品は今すぐ対処をhttps://kkm-mako.com/en/blog/articles/duplicati-cve/Canariien2026-07-23T07:09:39+00:00Free Backup Tool 'Duplicati' Has an Admin-Takeover Flaw (CVE-2026-16157) — Only a Risk for Non-Default Install Foldershttps://kkm-mako.com/blog/articles/duplicati-cve/Canariija2026-07-23T07:09:28+00:00無料バックアップソフト『Duplicati』に管理者権限を奪われる脆弱性 CVE-2026-16157、既定以外の場所に入れた場合は要対処https://kkm-mako.com/en/blog/articles/ricoh-printer-cve/Canariien2026-07-23T06:10:40+00:00Ricoh Printers and MFPs Can Be Used as a Stepping Stone Into Your Network (CVE-2026-63226) — Update the Firmware if SSH Is Onhttps://kkm-mako.com/blog/articles/ricoh-printer-cve/Canariija2026-07-23T06:10:29+00:00リコーの複合機・プリンターに社内ネットワーク侵入の踏み台にされる脆弱性 CVE-2026-63226、SSH利用時はファームウェア更新をhttps://kkm-mako.com/en/blog/articles/openai-model-hugging-face-cyberattack/Canariien2026-07-23T01:39:14+00:00OpenAI Says Its In-Development AI Escaped a Test Sandbox and Attacked Hugging Facehttps://kkm-mako.com/blog/articles/openai-model-hugging-face-cyberattack/Canariija2026-07-23T01:39:04+00:00OpenAIの開発中AIが暴走、勝手にネットに出て別のAI企業を攻撃https://kkm-mako.com/en/blog/articles/check-point-smartconsole-cve/Canariien2026-07-22T20:11:32+00:00Check Point management console can be hijacked with no login (CVE-2026-16232) — exploited in the wild, patch nowhttps://kkm-mako.com/blog/articles/check-point-smartconsole-cve/Canariija2026-07-22T20:11:22+00:00Check Pointの管理ソフトにログイン不要で管理者乗っ取りの脆弱性 CVE-2026-16232、悪用中で即修正をhttps://kkm-mako.com/en/blog/articles/bind-cve/Canariien2026-07-22T16:10:13+00:00DNS software "BIND" hit by nine flaws that can block sites or crash the server (CVE-2026-13321 and more) — update to 9.20.26 / 9.21.24https://kkm-mako.com/blog/articles/bind-cve/Canariija2026-07-22T16:10:02+00:00DNSの定番ソフト「BIND」に脆弱性9件、特定サイトが開けなくなる恐れ CVE-2026-13321ほか9.20.26／9.21.24へ更新をhttps://kkm-mako.com/en/blog/articles/grav-cve/Canariien2026-07-22T13:12:31+00:00Critical Grav CMS flaws (CVE-2026-65008 and more) risk site takeover — update nowhttps://kkm-mako.com/blog/articles/grav-cve/Canariija2026-07-22T13:12:20+00:00サイト作成ソフト「Grav」に深刻な脆弱性が複数、CVE-2026-65008などでサイト乗っ取りの恐れ 最新版へ更新をhttps://kkm-mako.com/en/blog/articles/plane-cve/Canariien2026-07-22T03:25:34+00:00Plane Bug CVE-2026-46558 Lets Any Logged-In User Read and Delete Other Teams' Files — Update to v1.3.1https://kkm-mako.com/blog/articles/plane-cve/Canariija2026-07-22T03:25:24+00:00プロジェクト管理ツール『Plane』に別チームのファイルを盗み見・削除できる脆弱性 CVE-2026-46558、v1.3.1へ即更新をhttps://kkm-mako.com/en/blog/articles/oracle-critical-patch-update-2026-07/Canariien2026-07-21T23:22:45+00:00Oracle's quarterly patch hits a record 1,455 fixes, with no-login takeover flaws in WebLogic and more (July 2026)https://kkm-mako.com/blog/articles/oracle-critical-patch-update-2026-07/Canariija2026-07-21T23:22:34+00:00Oracleの四半期パッチが過去最多1455件、WebLogicなどに無認証で乗っ取りの脆弱性（2026年7月）https://kkm-mako.com/en/blog/articles/tenable-security-center-cve/Canariien2026-07-21T21:22:00+00:00Four critical flaws in Tenable Security Center: CVE-2026-64878 et al. — post-login takeover, update to 6.8.0https://kkm-mako.com/blog/articles/tenable-security-center-cve/Canariija2026-07-21T21:21:48+00:00脆弱性管理製品『Tenable Security Center』に脆弱性4件 CVE-2026-64878ほか、ログイン後にサーバー乗っ取りの恐れ 6.8.0へ更新をhttps://kkm-mako.com/en/blog/articles/solarwinds-serv-u-cve/Canariien2026-07-21T18:24:59+00:0014 takeover flaws in enterprise file transfer SolarWinds Serv-U: CVE-2026-28302 et al. — update nowhttps://kkm-mako.com/blog/articles/solarwinds-serv-u-cve/Canariija2026-07-21T18:24:49+00:00企業向けファイル転送『SolarWinds Serv-U』に脆弱性14件 CVE-2026-28302ほか、管理者権限からサーバー乗っ取りの恐れhttps://kkm-mako.com/en/blog/articles/home-assistant-cve/Canariien2026-07-21T17:26:08+00:00Path-traversal takeover flaw in smart-home Home Assistant: CVE-2026-64825 — update to 2026.6.0https://kkm-mako.com/blog/articles/home-assistant-cve/Canariija2026-07-21T17:25:58+00:00スマートホーム基盤『Home Assistant』に脆弱性 CVE-2026-64825、初期設定・復元を突かれ乗っ取りの恐れ 2026.6.0へ更新を