2026年6月8日の
セキュリティ情報

Subject: [Security Advisory] VMware Product Vulnerabilities (VMSA-2026-0004)

Dear IT Administration Team,

Broadcom has released a security advisory addressing multiple vulnerabilities across several VMware products.

■ Overview
Updates have been released for VMware Cloud Foundation, vSphere Foundation, Aria Operations, and Telco Cloud Platform. Specifically, VMSA-2026-0004 addresses CVE-2026-41722, CVE-2026-41723, and CVE-2026-41724.

■ Affected Scope
- VMware Cloud Foundation: Versions prior to 9.1.0.0 / 9.0.2.0 EP2 / 5.x
- VMware vSphere Foundation: Versions prior to 9.1.0.0 / 9.0.2.0 EP2
- VMware Aria Operations: Versions prior to 8.18.7 / 8.18.6
- VMware Telco Cloud Platform: Versions prior to 5.x

■ Action Plan
1. Verify the current versions of VMware products deployed in the environment.
2. Apply the necessary updates as specified in the official Broadcom security advisory.

■ Reference
- VMSA-2026-0004: VMware Cloud Foundation Operations updates

Priority: High
Deadline: Immediate

Subject: [Security Advisory] TP-Link Tapo C520WS (CVE-2026-8714) Mitigation

Dear IT/Security Team,

We are sharing information regarding a high-severity vulnerability in TP-Link network cameras.

■ Overview
A vulnerability (CVE-2026-8714) has been discovered in the Tapo C520WS v2. An attacker can trigger a Denial of Service (DoS) condition by sending specially crafted data, rendering the device inoperable until a reboot occurs.

■ Affected Scope
- Product: Tapo C520WS v2

■ Mitigation Steps
1. Verify the current firmware version of the deployed devices.
2. Update the firmware to version 1.2.6 Build 260528 Rel.60422n or later.

■ Reference
- INCIBE-2026-403 / CVE-2026-8714

Priority: High
Deadline: Immediate action recommended

Subject: [Security Notice] Updates for Multiple IBM Products (AV26-553)

Dear IT Administration Team,

This is a notification regarding security advisories published by IBM between June 1 and 7, 2026.

■ Overview
IBM has released security updates to address vulnerabilities in several of its product lines. These updates are critical for maintaining the security posture of the affected environments.

■ Affected Scope
- Decision Optimization for Cloud Pak for Data (v5.0 - 5.3.1 Patch 2)
- DevOps Test UI (v11.0 - 11.0.7)
- FileNet Content Manager (Multiple versions)
- IBM App Connect Enterprise / Operator (Multiple versions)
- IBM Automation Assets in CP4I (Multiple versions)
- IBM Big SQL on Cloud Pak for Data (Multiple versions)
- IBM Bob (v1.0.0, 1.0.1, 1.0.2)
- IBM Business Automation Insights / Workflow / ESB (Multiple versions)
- IBM Enterprise Content Management Text Search (Multiple versions)
- IBM ICP – Discovery (v5.0.0 - 5.3.1)
- IBM InfoSphere Optim Archive Viewer (v11.7.0.0 - 11.7.0.13)
- IBM Maximo Application Suite - Visual Inspection Component (Multiple versions)
- IBM Maximo

■ Action Plan
1. Identify if any of the listed products and versions are currently deployed in our environment.
2. Apply the latest security patches or upgrade to the fixed versions as provided by IBM.

■ Reference
- IBM Security Advisory (AV26-553)

Priority: High
Deadline: Please review and schedule patching as soon as possible.

Subject: [Security] Red Hat Product Vulnerability Updates (Linux kernel etc.)

Dear IT Administration Team,

This is a notification regarding security updates for Red Hat products.

■ Overview
Red Hat has released security advisories to address vulnerabilities affecting multiple products, including the Linux kernel.

■ Scope
- Red Hat Enterprise Linux (RHEL) - Multiple versions/platforms
- Red Hat CodeReady Linux Builder
- Red Hat Enterprise Linux Server
- Red Hat Enterprise Linux for Real Time

■ Action Plan
1. Review the official Red Hat Security Advisories to determine if your current environment is affected.
2. Apply the necessary security patches and reboot systems if required.

■ Reference
- Red Hat Security Advisories

Priority: Medium
Deadline: Please review immediately and schedule updates for the next maintenance window.