CVE-2026-28267 (GCVE-0-2026-28267)

Vulnerability from cvelistv5 – Published: 2026-03-09 22:28 – Updated: 2026-03-10 14:16
VLAI
Summary
Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.
Severity
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
6.8 (Medium)
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-03-10 14:16 UTC
CWE
  • CWE-276 - Incorrect default permissions
Assigner
References
Impacted products
Vendor Product Version CPE status
Digital Arts Inc. i-フィルター 10 (Windows version only) Affected: prior to Ver.10.02.00
guessed Create a notification for this product.
Digital Arts Inc. i-フィルター 6.0 Affected: prior to Ver.6.00.57
guessed Create a notification for this product.
Digital Arts Inc. i-フィルター for ネットカフェ Affected: prior to Ver.6.10.57
guessed Create a notification for this product.
Digital Arts Inc. i-フィルター for マルチデバイス (Windows version only) Affected: prior to Ver.6.00.57
guessed Create a notification for this product.
Digital Arts Inc. i-フィルター for ZAQ (Windows version only) Affected: prior to Ver.6.00.57
guessed Create a notification for this product.
Digital Arts Inc. i-フィルター for プロバイダー Affected: prior to Ver.2.00.30
guessed Create a notification for this product.
Digital Arts Inc. i-FILTER ブラウザー＆クラウド MultiAgent for Windows Affected: prior to Ver.4.93R13
guessed Create a notification for this product.
Digital Arts Inc. DigitalArts@Cloud Agent (for Windows) Affected: prior to Ver.1.70R01
guessed Create a notification for this product.
OPTiM Corporation Optimal Biz Web Filtering Powered by i-FILTER (Windows version) Affected: prior to 4.93R13
guessed Create a notification for this product.
Inventit Inc. MobiConnect i-FILTER Browser Option MultiAgent for Windows Affected: prior to Ver.4.93R13
guessed Create a notification for this product.
Fujitsu Limited i-FILTER Browser & Cloud MultiAgent for Windows Affected: prior to Ver.4.93R13
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-10T14:16:23.241801Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-10T14:16:29.163Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc 10 (Windows version only)",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.10.02.00"
            }
          ]
        },
        {
          "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc 6.0",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.6.00.57"
            }
          ]
        },
        {
          "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30cd\u30c3\u30c8\u30ab\u30d5\u30a7",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.6.10.57"
            }
          ]
        },
        {
          "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30de\u30eb\u30c1\u30c7\u30d0\u30a4\u30b9 (Windows version only)",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.6.00.57"
            }
          ]
        },
        {
          "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for ZAQ (Windows version only)",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.6.00.57"
            }
          ]
        },
        {
          "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.2.00.30"
            }
          ]
        },
        {
          "product": "i-FILTER \u30d6\u30e9\u30a6\u30b6\u30fc\uff06\u30af\u30e9\u30a6\u30c9 MultiAgent for Windows",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.4.93R13"
            }
          ]
        },
        {
          "product": "DigitalArts@Cloud Agent (for Windows)",
          "vendor": "Digital Arts Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.1.70R01"
            }
          ]
        },
        {
          "product": "Optimal Biz Web Filtering Powered by i-FILTER (Windows version)",
          "vendor": "OPTiM Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 4.93R13"
            }
          ]
        },
        {
          "product": "MobiConnect i-FILTER Browser Option MultiAgent for Windows",
          "vendor": "Inventit Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.4.93R13"
            }
          ]
        },
        {
          "product": "i-FILTER Browser \u0026 Cloud MultiAgent for Windows",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver.4.93R13"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple i-\u30d5\u30a3\u30eb\u30bf\u30fc products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "Incorrect default permissions",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-09T22:28:24.535Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl\u0026filename=information_20260309_01.pdf"
        },
        {
          "url": "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl\u0026filename=information_20260309_02.pdf"
        },
        {
          "url": "https://biz3.optim.co.jp/"
        },
        {
          "url": "https://www.mobi-connect.net/file/ifilter/"
        },
        {
          "url": "https://sd.fjsd001.dfcenter.jp.fujitsu.com/portal/ja/kb/articles/windows%E3%81%AE%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%83%8E%E3%83%BC%E3%83%88"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN17307628/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2026-28267",
    "datePublished": "2026-03-09T22:28:24.535Z",
    "dateReserved": "2026-02-26T00:21:16.561Z",
    "dateUpdated": "2026-03-10T14:16:29.163Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-28267",
      "date": "2026-09-30",
      "epss": "0.00153",
      "percentile": "0.03798"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc 10 (Windows version only)",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.10.02.00"
                  }
                ]
              },
              {
                "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc 6.0",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.6.00.57"
                  }
                ]
              },
              {
                "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30cd\u30c3\u30c8\u30ab\u30d5\u30a7",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.6.10.57"
                  }
                ]
              },
              {
                "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30de\u30eb\u30c1\u30c7\u30d0\u30a4\u30b9 (Windows version only)",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.6.00.57"
                  }
                ]
              },
              {
                "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for ZAQ (Windows version only)",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.6.00.57"
                  }
                ]
              },
              {
                "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.2.00.30"
                  }
                ]
              },
              {
                "product": "i-FILTER \u30d6\u30e9\u30a6\u30b6\u30fc\uff06\u30af\u30e9\u30a6\u30c9 MultiAgent for Windows",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.4.93R13"
                  }
                ]
              },
              {
                "product": "DigitalArts@Cloud Agent (for Windows)",
                "vendor": "Digital Arts Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.1.70R01"
                  }
                ]
              },
              {
                "product": "Optimal Biz Web Filtering Powered by i-FILTER (Windows version)",
                "vendor": "OPTiM Corporation",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 4.93R13"
                  }
                ]
              },
              {
                "product": "MobiConnect i-FILTER Browser Option MultiAgent for Windows",
                "vendor": "Inventit Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.4.93R13"
                  }
                ]
              },
              {
                "product": "i-FILTER Browser \u0026 Cloud MultiAgent for Windows",
                "vendor": "Fujitsu Limited",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to Ver.4.93R13"
                  }
                ]
              }
            ],
            "source": "vultures@jpcert.or.jp"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Multiple i-\u30d5\u30a3\u30eb\u30bf\u30fc products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user."
          },
          {
            "lang": "es",
            "value": "M\u00faltiples productos i-????? est\u00e1n configurados con ajustes de permisos de acceso a archivos incorrectos. Los archivos pueden ser creados o sobrescritos en el directorio del sistema o en el directorio de copia de seguridad por un usuario no administrativo."
          }
        ],
        "id": "CVE-2026-28267",
        "lastModified": "2026-06-17T10:28:24.143",
        "metrics": {
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.0"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "vultures@jpcert.or.jp",
              "type": "Secondary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "vultures@jpcert.or.jp",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-28267",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-10T14:16:23.241801Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-03-10T17:38:38.227",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://biz3.optim.co.jp/"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://jvn.jp/en/jp/JVN17307628/"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://sd.fjsd001.dfcenter.jp.fujitsu.com/portal/ja/kb/articles/windows%E3%81%AE%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%83%8E%E3%83%BC%E3%83%88"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl\u0026filename=information_20260309_01.pdf"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl\u0026filename=information_20260309_02.pdf"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://www.mobi-connect.net/file/ifilter/"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-276"
              }
            ],
            "source": "vultures@jpcert.or.jp",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-03-27T07:51:21+00:00",
      "cve": "CVE-2026-28267",
      "id": "CVE-2026-28267",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-28267",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28267.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-28267",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-03-10T14:16:23.241801Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-03-10T14:16:25.685Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc 10 (Windows version only)",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.10.02.00"
                }
              ]
            },
            {
              "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc 6.0",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.6.00.57"
                }
              ]
            },
            {
              "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30cd\u30c3\u30c8\u30ab\u30d5\u30a7",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.6.10.57"
                }
              ]
            },
            {
              "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30de\u30eb\u30c1\u30c7\u30d0\u30a4\u30b9 (Windows version only)",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.6.00.57"
                }
              ]
            },
            {
              "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for ZAQ (Windows version only)",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.6.00.57"
                }
              ]
            },
            {
              "product": "i-\u30d5\u30a3\u30eb\u30bf\u30fc for \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.2.00.30"
                }
              ]
            },
            {
              "product": "i-FILTER \u30d6\u30e9\u30a6\u30b6\u30fc\uff06\u30af\u30e9\u30a6\u30c9 MultiAgent for Windows",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.4.93R13"
                }
              ]
            },
            {
              "product": "DigitalArts@Cloud Agent (for Windows)",
              "vendor": "Digital Arts Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.1.70R01"
                }
              ]
            },
            {
              "product": "Optimal Biz Web Filtering Powered by i-FILTER (Windows version)",
              "vendor": "OPTiM Corporation",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 4.93R13"
                }
              ]
            },
            {
              "product": "MobiConnect i-FILTER Browser Option MultiAgent for Windows",
              "vendor": "Inventit Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.4.93R13"
                }
              ]
            },
            {
              "product": "i-FILTER Browser \u0026 Cloud MultiAgent for Windows",
              "vendor": "Fujitsu Limited",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to Ver.4.93R13"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple i-\u30d5\u30a3\u30eb\u30bf\u30fc products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user."
            }
          ],
          "metrics": [
            {
              "cvssV3_0": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.0"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en-US",
                  "value": "GENERAL"
                }
              ]
            },
            {
              "cvssV4_0": {
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en-US",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-276",
                  "description": "Incorrect default permissions",
                  "lang": "en-US",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-03-09T22:28:24.535Z",
            "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            "shortName": "jpcert"
          },
          "references": [
            {
              "url": "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl\u0026filename=information_20260309_01.pdf"
            },
            {
              "url": "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl\u0026filename=information_20260309_02.pdf"
            },
            {
              "url": "https://biz3.optim.co.jp/"
            },
            {
              "url": "https://www.mobi-connect.net/file/ifilter/"
            },
            {
              "url": "https://sd.fjsd001.dfcenter.jp.fujitsu.com/portal/ja/kb/articles/windows%E3%81%AE%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%83%8E%E3%83%BC%E3%83%88"
            },
            {
              "url": "https://jvn.jp/en/jp/JVN17307628/"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "assignerShortName": "jpcert",
        "cveId": "CVE-2026-28267",
        "datePublished": "2026-03-09T22:28:24.535Z",
        "dateReserved": "2026-02-26T00:21:16.561Z",
        "dateUpdated": "2026-03-10T14:16:29.163Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.