{"id":11926,"date":"2026-06-04T00:31:16","date_gmt":"2026-06-03T15:31:16","guid":{"rendered":"https:\/\/kusanagi.tokyo\/column?p=11926"},"modified":"2026-06-04T00:32:10","modified_gmt":"2026-06-03T15:32:10","slug":"kusanagi-9-%e6%9c%80%e6%96%b0%e3%82%a2%e3%83%83%e3%83%97%e3%83%87%e3%83%bc%e3%83%88%e3%81%be%e3%81%a8%e3%82%81%ef%bc%882026%e5%b9%b45%e6%9c%88%ef%bc%89","status":"publish","type":"post","link":"https:\/\/kusanagi.tokyo\/column\/archives\/column_11926","title":{"rendered":"KUSANAGI 9 \u6700\u65b0\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u307e\u3068\u3081\uff082026\u5e745\u6708\uff09"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u3053\u3093\u306b\u3061\u306f\u3002KUSANAGI \u958b\u767a\u30c1\u30fc\u30e0\u3001\u30d7\u30ed\u30c0\u30af\u30c8\u30de\u30cd\u30b8\u30e3\u30fc\u306e\u76f8\u539f\u3067\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2026\u5e745\u6708\u306f\u3001PHP \u5168\u7cfb\u7d71\u30fbNginx\u30fbApache HTTP Server\u30fbOpenSSL\u30fbcurl \u306a\u3069\u5e83\u7bc4\u306a\u30df\u30c9\u30eb\u30a6\u30a7\u30a2\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u304c\u96c6\u4e2d\u3057\u305f\u6708\u3068\u306a\u308a\u307e\u3057\u305f\u3002KUSANAGI \u672c\u4f53\u3082\u8a084\u56de\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7\u3092\u5b9f\u65bd\u3057\u3001Nginx 1.31 \u7cfb\u3078\u306e\u6b63\u5f0f\u5bfe\u5fdc\u3068\u3044\u3046\u5927\u304d\u306a\u30c8\u30d4\u30c3\u30af\u3082\u3042\u308a\u307e\u3059\u3002\u5408\u8a0851\u4ef6\u306e\u30ea\u30ea\u30fc\u30b9\u3092\u884c\u3044\u307e\u3057\u305f\u306e\u3067\u3001\u4ee5\u4e0b\u306b\u307e\u3068\u3081\u3066\u3054\u5831\u544a\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"5%E6%9C%88%E3%81%AE%E3%82%A2%E3%83%83%E3%83%97%E3%83%87%E3%83%BC%E3%83%88%E5%86%85%E5%AE%B9\"><\/span>5\u6708\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u5185\u5bb9<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"KUSANAGI_%E3%83%90%E3%83%BC%E3%82%B8%E3%83%A7%E3%83%B3%E3%82%A2%E3%83%83%E3%83%97\"><\/span>KUSANAGI \u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">KUSANAGI 9 \u672c\u4f53\u304a\u3088\u3073 Security Edition \u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7\u3092\u8a088\u56de\uff08\u5404\u30a8\u30c7\u30a3\u30b7\u30e7\u30f34\u56de\u305a\u3064\uff09\u5b9f\u65bd\u3057\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>\u65e5\u4ed8<\/th><th>\u30d1\u30c3\u30b1\u30fc\u30b8<\/th><th>\u30d0\u30fc\u30b8\u30e7\u30f3<\/th><th>\u5bfe\u8c61\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/th><\/tr><\/thead><tbody><tr><td>2026-05-11<\/td><td>KUSANAGI 9<\/td><td>9.8.10-1<\/td><td>Business Edition \/ KUSANAGI 9 \/ WEXAL PST<\/td><\/tr><tr><td>2026-05-11<\/td><td>KUSANAGI Security Edition<\/td><td>10.3.14-1.el9<\/td><td>Security Edition<\/td><\/tr><tr><td>2026-05-19<\/td><td>KUSANAGI 9<\/td><td>9.8.11-1<\/td><td>Business Edition \/ KUSANAGI 9 \/ WEXAL PST<\/td><\/tr><tr><td>2026-05-19<\/td><td>KUSANAGI Security Edition<\/td><td>10.3.15-1.el9<\/td><td>Security Edition<\/td><\/tr><tr><td>2026-05-21<\/td><td>KUSANAGI 9<\/td><td>9.8.12-1<\/td><td>Business Edition \/ KUSANAGI 9 \/ WEXAL PST<\/td><\/tr><tr><td>2026-05-21<\/td><td>KUSANAGI Security Edition<\/td><td>10.3.16-1.el9<\/td><td>Security Edition<\/td><\/tr><tr><td>2026-05-26<\/td><td>KUSANAGI 9<\/td><td>9.8.13-1<\/td><td>Business Edition \/ KUSANAGI 9 \/ WEXAL PST<\/td><\/tr><tr><td>2026-05-26<\/td><td>KUSANAGI Security Edition<\/td><td>10.3.17-1.el9<\/td><td>Security Edition<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E3%83%9F%E3%83%89%E3%83%AB%E3%82%A6%E3%82%A7%E3%82%A2%E3%83%BB%E3%83%A2%E3%82%B8%E3%83%A5%E3%83%BC%E3%83%AB%E6%9B%B4%E6%96%B0\"><\/span>\u30df\u30c9\u30eb\u30a6\u30a7\u30a2\u30fb\u30e2\u30b8\u30e5\u30fc\u30eb\u66f4\u65b0<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">5\u6708\u306f15\u7a2e\u985e\u30fb27\u4ef6\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u66f4\u65b0\u3092\u5b9f\u65bd\u3057\u307e\u3057\u305f\u3002\u4e3b\u306a\u30d1\u30c3\u30b1\u30fc\u30b8\u3068\u4ee3\u8868\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u4ee5\u4e0b\u306b\u307e\u3068\u3081\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>\u65e5\u4ed8<\/th><th>\u30d1\u30c3\u30b1\u30fc\u30b8<\/th><th>\u4ee3\u8868\u30d0\u30fc\u30b8\u30e7\u30f3<\/th><th>\u5bfe\u8c61\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/th><th>\u5099\u8003<\/th><\/tr><\/thead><tbody><tr><td>2026-05-11<\/td><td><code>kusanagi-curl<\/code><\/td><td>8.20.0-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u3080\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8<\/td><\/tr><tr><td>2026-05-11<\/td><td><code>kusanagi-httpd24<\/code><\/td><td>2.4.67-1 \/ 2.4.67-1.el9<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u7dca\u6025\u306e\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u3080\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8<\/td><\/tr><tr><td>2026-05-11<\/td><td><code>kusanagi-mod_security<\/code><\/td><td>2.9.13-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>WAF \u30a8\u30f3\u30b8\u30f3\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-11<\/td><td><code>kusanagi-mod_security_crs<\/code><\/td><td>4.26.0-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>CRS \u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-11<\/td><td><code>kusanagi-wp-plugins<\/code><\/td><td>20260511-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3\uff08kusanagi8 \u542b\u3080\uff09<\/td><td>\u540c\u68b1 WP \u30d7\u30e9\u30b0\u30a4\u30f3\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-12\u301c13<\/td><td><code>kusanagi-php82<\/code><\/td><td>8.2.31-1 \/ 8.2.31-1.el9<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u7dca\u6025\u306e\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u3080 PHP 8.2 \u7cfb\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-13<\/td><td><code>kusanagi-php83<\/code><\/td><td>8.3.31-1 \/ 8.3.31-1.el9<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u7dca\u6025\u306e\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u3080 PHP 8.3 \u7cfb\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-13<\/td><td><code>kusanagi-php84<\/code><\/td><td>8.4.21-1 \/ 8.4.21-1.el9<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u7dca\u6025\u306e\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u3080 PHP 8.4 \u7cfb\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-13<\/td><td><code>kusanagi-php85<\/code><\/td><td>8.5.6-1 \/ 8.5.6-1.el9<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u7dca\u6025\u306e\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u3080 PHP 8.5 \u7cfb\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-18<\/td><td><code>kusanagi-nginx130<\/code><\/td><td>1.30.1-1 \u2192 1.30.2-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u7dca\u6025\u30fb\u8a55\u4fa1\u5f85\u3061\u306e\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u30802\u56de\u306e\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-18<\/td><td><code>kusanagi-nginx131<\/code><\/td><td>1.31.0-1 \u2192 1.31.1-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u7dca\u6025\u30fb\u8a55\u4fa1\u5f85\u3061\u306e\u8106\u5f31\u6027\u4fee\u6b63\u3092\u542b\u30802\u56de\u306e\u66f4\u65b0\uff08\u65b0\u898f\u8ffd\u52a0\uff09<\/td><\/tr><tr><td>2026-05-18<\/td><td><code>kusanagi-composer<\/code><\/td><td>2.9.8-1 \u2192 2.10.0-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>\u8106\u5f31\u6027\u4fee\u6b63\u304a\u3088\u3073\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7<\/td><\/tr><tr><td>2026-05-20<\/td><td><code>kusanagi-nodejs22<\/code><\/td><td>22.22.3-1<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>Node.js 22 \u7cfb\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-08<\/td><td><code>kusanagi-prem3-nodejs<\/code><\/td><td>2.2.13-1<\/td><td>WEXAL PST<\/td><td>PST \u5411\u3051 Node.js \u30e2\u30b8\u30e5\u30fc\u30eb\u66f4\u65b0<\/td><\/tr><tr><td>2026-05-07<\/td><td><code>kusanagi-openssl<\/code><\/td><td>3.5.6-2<\/td><td>\u5168\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/td><td>OpenSSL \u30d1\u30c3\u30c1\u30ea\u30ea\u30fc\u30b9<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u307e\u305f\u30012026\u5e745\u670821\u65e5\u306b\u306fKUSANAGI\u306e\u521d\u671f\u8a2d\u5b9a\u306b\u304a\u3051\u308b Nginx \u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u30d0\u30fc\u30b8\u30e7\u30f3\u304c 1.31 \u7cfb\u306b\u5909\u66f4\u3055\u308c\u307e\u3057\u305f\u3002\u8a73\u7d30\u306f\u300c<a href=\"https:\/\/kusanagi.tokyo\/releases\/24873\/\">KUSANAGI\u304cNginx 1.31\u306b\u5bfe\u5fdc - \u521d\u671f\u8a2d\u5b9a\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u3082Nginx 1.31\u306b<\/a>\u300d\u3092\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E5%AF%BE%E5%BF%9C\"><\/span>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u5fdc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">5\u6708\u306f\u8a0811\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u6df1\u523b\u5ea6\u300c\u7dca\u6025\u300d\u304c8\u4ef6\u3001\u300c\u8a55\u4fa1\u5f85\u3061\u300d\u304c3\u4ef6\u3067\u3059\u3002\u5bfe\u5fdc\u3057\u305f\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3068\u4e3b\u306a\u5185\u5bb9\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">PHP \u7cfb\uff08kusanagi-php82 \/ php83 \/ php84 \/ php85\uff09<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">2026\u5e745\u670812\u301c13\u65e5\u306b\u304b\u3051\u3066\u3001PHP 8.2\u30fb8.3\u30fb8.4\u30fb8.5 \u306e\u5168\u7cfb\u7d71\u3067\u6df1\u523b\u5ea6\u300c\u7dca\u6025\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u307e\u3057\u305f\uff08<a href=\"https:\/\/kusanagi.tokyo\/releases\/24526\/\">php82<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24563\/\">php83<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24583\/\">php84<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24604\/\">php85<\/a>\uff09\u3002\u4e3b\u306a\u4fee\u6b63\u5185\u5bb9\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>XSS\uff08<code>CVE-2026-6735<\/code>\uff09: \u30b9\u30c6\u30fc\u30bf\u30b9\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u304a\u3051\u308b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0<\/li>\n\n\n\n<li>SQL \u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\uff08<code>CVE-2025-14179<\/code>\uff09: NUL \u30d0\u30a4\u30c8\u3092\u542b\u3080\u30af\u30a9\u30fc\u30c8\u6587\u5b57\u5217\u7d4c\u7531\u306e SQL \u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/li>\n\n\n\n<li>NULL \u30dd\u30a4\u30f3\u30bf\u53c2\u7167\uff08<code>CVE-2026-7259<\/code>\uff09: <code>mb_ereg_search_init()<\/code> \u7d4c\u7531\u3067\u306e NULL \u30dd\u30a4\u30f3\u30bf\u53c2\u7167<\/li>\n\n\n\n<li>\u5883\u754c\u5916\u30a2\u30af\u30bb\u30b9\uff08<code>CVE-2026-6104<\/code>\uff09: <code>mbfl_name2encoding_ex()<\/code> \u306b\u304a\u3051\u308b\u5883\u754c\u5916\u30a2\u30af\u30bb\u30b9<\/li>\n\n\n\n<li>SOAP \u95a2\u9023\u306e Use-after-free\uff08<code>CVE-2026-7261<\/code>\uff09\u307b\u304b\u3001\u7b26\u53f7\u4ed8\u304d\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\uff08<code>CVE-2026-7568<\/code>\uff09\u7b49\u3001\u5408\u8a0810\u4ef6\u524d\u5f8c\u306eCVE\u3092\u4e00\u62ec\u4fee\u6b63<\/li>\n\n\n\n<li>PHP 8.5 \u7cfb\u306f\u3055\u3089\u306b <code>CVE-2026-42371<\/code>\uff08uriparser \u306e\u6570\u5024\u5207\u308a\u6368\u3066\uff09\u3082\u5bfe\u8c61<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">Nginx \u7cfb\uff08kusanagi-nginx130 \/ nginx131\uff09<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">2026\u5e745\u670818\u65e5\u306b Nginx 1.30\u30fb1.31 \u53cc\u65b9\u3067\u6df1\u523b\u5ea6\u300c\u7dca\u6025\u300d\u306e\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u307e\u3057\u305f\uff08<a href=\"https:\/\/kusanagi.tokyo\/releases\/24743\/\">nginx130 \u7dca\u6025<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24782\/\">nginx131 \u7dca\u6025<\/a>\uff09\u3002\u4fee\u6b63\u3055\u308c\u305f\u4e3b\u306a\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>CVE-2026-42926<\/code>: <code>proxy_set_body<\/code> \u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6\u4f7f\u7528\u6642\u306e HTTP\/2 \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u3078\u306e\u30c7\u30fc\u30bf\u6ce8\u5165<\/li>\n\n\n\n<li><code>CVE-2026-42945<\/code>: <code>ngx_http_rewrite_module<\/code> \u51e6\u7406\u4e2d\u306e\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306b\u3088\u308b\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027<\/li>\n\n\n\n<li><code>CVE-2026-42946<\/code>: <code>ngx_http_scgi_module<\/code> \/ <code>ngx_http_uwsgi_module<\/code> \u3067\u306e\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u904e\u5270\u8aad\u307f\u51fa\u3057\u306b\u3088\u308b\u30e1\u30e2\u30ea\u6f0f\u6d29\u307e\u305f\u306f\u30bb\u30b0\u30e1\u30f3\u30c6\u30fc\u30b7\u30e7\u30f3\u30d5\u30a9\u30eb\u30c8<\/li>\n\n\n\n<li><code>CVE-2026-42934<\/code>: <code>charset_map<\/code> \u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6\u306e UTF-8 \u30c7\u30b3\u30fc\u30c9\u51e6\u7406\u306b\u304a\u3051\u308b\u9650\u5b9a\u7684\u306a\u30e1\u30e2\u30ea\u6f0f\u6d29\u307e\u305f\u306f\u30bb\u30b0\u30e1\u30f3\u30c6\u30fc\u30b7\u30e7\u30f3\u30d5\u30a9\u30eb\u30c8<\/li>\n\n\n\n<li><code>CVE-2026-40460<\/code>: HTTP\/3 \u4f7f\u7528\u6642\u306e\u63a5\u7d9a\u30de\u30a4\u30b0\u30ec\u30fc\u30b7\u30e7\u30f3\u51e6\u7406\u306b\u3088\u308b\u30a2\u30c9\u30ec\u30b9\u306a\u308a\u3059\u307e\u3057<\/li>\n\n\n\n<li><code>CVE-2026-40701<\/code>: <code>ssl_ocsp<\/code> \u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6\u4f7f\u7528\u6642\u306e DNS \u5fdc\u7b54\u51e6\u7406\u306b\u304a\u3051\u308b Use-after-free<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u3055\u3089\u306b2026\u5e745\u670825\u65e5\u306b\u306f\u3001<code>ngx_http_rewrite_module<\/code> \u306e\u30aa\u30fc\u30d0\u30fc\u30e9\u30c3\u30d7\u30ad\u30e3\u30d7\u30c1\u30e3\u8a2d\u5b9a\u306b\u8d77\u56e0\u3059\u308b\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\uff08<code>CVE-2026-9256<\/code>\uff09\u306b\u5bfe\u3057\u3066\u300c\u8a55\u4fa1\u5f85\u3061\u300d\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u5373\u65e5\u4fee\u6b63\u7248\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\uff08<a href=\"https:\/\/kusanagi.tokyo\/releases\/24965\/\">nginx130<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24950\/\">nginx131<\/a>\uff09\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Apache HTTP Server\uff08kusanagi-httpd24\uff09<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">2026\u5e745\u670811\u65e5\u306b\u6df1\u523b\u5ea6\u300c\u7dca\u6025\u300d\u306e\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001<a href=\"https:\/\/kusanagi.tokyo\/releases\/24493\/\">kusanagi-httpd24 2.4.67-1<\/a> \u3068\u3057\u3066\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">curl\uff08kusanagi-curl\uff09<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">2026\u5e745\u670811\u65e5\u306b\u300c\u8a55\u4fa1\u5f85\u3061\u300d\u306e\u8106\u5f31\u6027\u60c5\u5831\u3092\u516c\u958b\u3057\u3001<a href=\"https:\/\/kusanagi.tokyo\/releases\/24476\/\">kusanagi-curl 8.20.0-1<\/a> \u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\uff08<a href=\"https:\/\/kusanagi.tokyo\/releases\/24480\/\">\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea<\/a>\uff09\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Composer\uff08kusanagi-composer\uff09<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">2026\u5e745\u670818\u65e5\u306b GitHub \u30c8\u30fc\u30af\u30f3\u306e\u691c\u8a3c\u30fb\u6f0f\u6d29\u306b\u95a2\u3059\u308b\u300c\u8a55\u4fa1\u5f85\u3061\u300d\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\uff08<code>CVE-2026-45793<\/code>\uff09\u3092\u516c\u958b\u3057\u3001<a href=\"https:\/\/kusanagi.tokyo\/releases\/24728\/\">kusanagi-composer 2.9.8-1<\/a> \u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\uff08<a href=\"https:\/\/kusanagi.tokyo\/releases\/24732\/\">\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea<\/a>\uff09\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WordPress_%E3%83%97%E3%83%A9%E3%82%B0%E3%82%A4%E3%83%B3%E3%83%BB%E3%83%86%E3%83%BC%E3%83%9E_%E8%84%86%E5%BC%B1%E6%80%A7%E6%83%85%E5%A0%B1\"><\/span>WordPress \u30d7\u30e9\u30b0\u30a4\u30f3\u30fb\u30c6\u30fc\u30de \u8106\u5f31\u6027\u60c5\u5831<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">5\u6708\u306f\u9031\u6b21\u3067\u8a084\u56de\u306e WordPress \u30d7\u30e9\u30b0\u30a4\u30f3\u30fb\u30c6\u30fc\u30de\u8106\u5f31\u6027\u60c5\u5831\u307e\u3068\u3081\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u300210\u4e07\u4ef6\u4ee5\u4e0a\u306e\u30a2\u30af\u30c6\u30a3\u30d6\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u6301\u3061\u3001\u65e5\u672c\u8a9e\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u7d5e\u3063\u3066\u5831\u544a\u3057\u3066\u3044\u307e\u3059\u3002\u7279\u306b\u6ce8\u76ee\u5ea6\u306e\u9ad8\u3044\u3082\u306e\u3092\u4ee5\u4e0b\u306b\u30d4\u30c3\u30af\u30a2\u30c3\u30d7\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>LiteSpeed Cache<\/strong>\uff087.7\u4ee5\u524d\u3001CVSS 7.2 \/ \u9ad8\uff09: REST API \u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u7d4c\u7531\u306e\u84c4\u7a4d\u578b XSS\u3002\u7279\u5b9a\u6761\u4ef6\u4e0b\u3067\u672a\u8a8d\u8a3c\u653b\u6483\u8005\u304c\u4efb\u610f\u306e JavaScript \u3092\u633f\u5165\u53ef\u80fd\u3002\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3: 7.8\uff08<code>CVE-2026-3375<\/code>\uff09<\/li>\n\n\n\n<li><strong>WPCode<\/strong>\uff082.3.5\u4ee5\u524d\u3001CVSS 8.8 \/ \u9ad8\uff09: XML-RPC \u7d4c\u7531\u3067\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3002\u6295\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3067 PHP \u30b9\u30cb\u30da\u30c3\u30c8\u3092\u5b9f\u884c\u53ef\u80fd\u3002\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3: 2.3.6\uff08<code>CVE-2026-8832<\/code>\uff09<\/li>\n\n\n\n<li><strong>WooCommerce PayPal Payments<\/strong>\uff084.0.1\u4ee5\u524d\u3001CVSS 8.2 \/ \u9ad8\uff09: AJAX \u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306e\u8a8d\u53ef\u30c1\u30a7\u30c3\u30af\u6b20\u5982\u306b\u3088\u308b\u4e0d\u6b63\u6ce8\u6587\u64cd\u4f5c\u30fb\u60c5\u5831\u6f0f\u6d29\u3002\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3: 4.0.2\uff08<code>CVE-2026-\uff08\u8a73\u7d30\u306f\u60c5\u5831\u30da\u30fc\u30b8\u53c2\u7167\uff09<\/code>\uff09<\/li>\n\n\n\n<li><strong>AI Engine<\/strong>\uff083.4.9\u3001CVSS 8.8 \/ \u9ad8\uff09: MCP OAuth \u7d4c\u7531\u306e\u6a29\u9650\u6607\u683c\u3002\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3067\u7ba1\u7406\u8005\u30ec\u30d9\u30eb\u306e\u30c4\u30fc\u30eb\u3092\u5b9f\u884c\u53ef\u80fd\u3002\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3: 3.5.0\uff08<code>CVE-2026-8719<\/code>\uff09<\/li>\n\n\n\n<li><strong>GiveWP<\/strong>\uff084.14.5\u4ee5\u524d\u3001CVSS 7.2 \/ \u9ad8\uff09: \u4fdd\u5b58\u578b XSS\u3002\u672a\u8a8d\u8a3c\u653b\u6483\u8005\u304c\u4efb\u610f\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u633f\u5165\u53ef\u80fd\u3002\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3: 4.14.6\uff08<code>CVE-2026-42678<\/code>\uff09<\/li>\n\n\n\n<li><strong>Fluent Forms<\/strong>\uff086.1.21\u4ee5\u524d\u3001CVSS 8.2 \/ \u9ad8\uff09: \u30e6\u30fc\u30b6\u30fc\u5236\u5fa1\u30ad\u30fc\u306b\u3088\u308b\u8a8d\u53ef\u56de\u907f\u3002\u4ed6\u30d5\u30a9\u30fc\u30e0\u306e\u9001\u4fe1\u30c7\u30fc\u30bf\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u30fb\u6539\u3056\u3093\u304c\u53ef\u80fd\u3002\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3: 6.2.0\uff08<code>CVE-2026-5396<\/code>\uff09<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u5229\u7528\u4e2d\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u304c\u542b\u307e\u308c\u308b\u5834\u5408\u306f\u3001\u901f\u3084\u304b\u306b\u6700\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u304a\u9858\u3044\u3057\u307e\u3059\u3002\u9031\u6b21\u30ec\u30dd\u30fc\u30c8\u306e\u5168\u4ef6\u306f\u5404\u30ea\u30ea\u30fc\u30b9\u30da\u30fc\u30b8\u3092\u3054\u53c2\u7167\u304f\u3060\u3055\u3044\uff08<a href=\"https:\/\/kusanagi.tokyo\/releases\/24443\/\">04\/30-05\/06<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24653\/\">05\/07-05\/13<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24853\/\">05\/14-05\/20<\/a> \/ <a href=\"https:\/\/kusanagi.tokyo\/releases\/24998\/\">05\/21-05\/27<\/a>\uff09\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E4%BB%8A%E5%BE%8C%E3%81%AE%E8%A6%8B%E9%80%9A%E3%81%97\"><\/span>\u4eca\u5f8c\u306e\u898b\u901a\u3057<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Nginx 1.31 \u7cfb\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u63a1\u7528\u304c\u5b8c\u4e86\u3057\u305f\u3053\u3068\u306b\u3088\u308a\u3001\u4eca\u5f8c\u306f 1.31 \u7cfb\u3092\u4e2d\u5fc3\u3068\u3057\u305f\u5b89\u5b9a\u904b\u7528\u30fb\u6a5f\u80fd\u5f37\u5316\u306b\u53d6\u308a\u7d44\u3093\u3067\u3044\u304d\u307e\u3059\u3002PHP \u306b\u3064\u3044\u3066\u3082 8.2\u30fb8.3\u30fb8.4\u30fb8.5 \u306e4\u7cfb\u7d71\u3092\u7d99\u7d9a\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u304a\u308a\u3001\u30a2\u30c3\u30d7\u30b9\u30c8\u30ea\u30fc\u30e0\u306e\u30ea\u30ea\u30fc\u30b9\u30b5\u30a4\u30af\u30eb\u306b\u5408\u308f\u305b\u3066\u8fc5\u901f\u306a\u5bfe\u5fdc\u3092\u7d9a\u3051\u3066\u307e\u3044\u308a\u307e\u3059\u3002\u5f15\u304d\u7d9a\u304d\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u304c\u5165\u3063\u305f\u5834\u5408\u306f\u7dca\u6025\u5ea6\u306b\u5fdc\u3058\u3066\u5373\u6642\u30ea\u30ea\u30fc\u30b9\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E3%81%BE%E3%81%A8%E3%82%81\"><\/span>\u307e\u3068\u3081<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">2026\u5e745\u6708\u306f PHP \u5168\u7cfb\u7d71\u30fbNginx \u4e21\u7cfb\u7d71\u30fbApache HTTP Server\u30fbcurl \u306a\u3069\u3001\u4e3b\u8981\u306a\u30df\u30c9\u30eb\u30a6\u30a7\u30a2\u306b\u4e00\u6589\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u304c\u5165\u308b\u6708\u3068\u306a\u308a\u307e\u3057\u305f\u3002\u7279\u306b PHP \u304a\u3088\u3073 Nginx \u306e\u8106\u5f31\u6027\u306f\u6df1\u523b\u5ea6\u300c\u7dca\u6025\u300d\u306b\u5206\u985e\u3055\u308c\u308b\u3082\u306e\u304c\u591a\u304f\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002KUSANAGI \u3092\u3054\u5229\u7528\u306e\u65b9\u306f\u3001<code>yum update<\/code> \u307e\u305f\u306f <code>apt update &amp;&amp; apt upgrade<\/code> \u306b\u3066\u6700\u65b0\u7248\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u304a\u9858\u3044\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">KUSANAGI Security Edition \u3092\u3054\u5229\u7528\u306e\u65b9\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u3092\u542b\u3080\u5168\u30e2\u30b8\u30e5\u30fc\u30eb\u304c Security Edition \u7528\u30d1\u30c3\u30b1\u30fc\u30b8\u3068\u3057\u3066\u63d0\u4f9b\u3055\u308c\u3066\u3044\u307e\u3059\u3002Security Edition \u3067\u306f\u81ea\u52d5\u66f4\u65b0\uff08autoupdate\uff09\u6a5f\u80fd\u304c\u5229\u7528\u53ef\u80fd\u3067\u3059\u3002\u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u81ea\u52d5\u7684\u306b\u9069\u7528\u3067\u304d\u307e\u3059\u306e\u3067\u3001\u305c\u3072\u3054\u6d3b\u7528\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">KUSANAGI \u306e\u81ea\u52d5\u66f4\u65b0\u306b\u3064\u3044\u3066\u306f\u3001<a href=\"https:\/\/kusanagi.tokyo\/document\/kusanagi-autoupdate\/\">\u516c\u5f0f\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\uff08autoupdate\uff09<\/a>\u3092\u3054\u53c2\u7167\u304f\u3060\u3055\u3044\u3002\u5f15\u304d\u7d9a\u304d\u5b89\u5168\u30fb\u5feb\u9069\u306a WordPress \u904b\u7528\u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u307e\u3044\u308a\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u3053\u3093\u306b\u3061\u306f\u3002KUSANAGI \u958b\u767a\u30c1\u30fc\u30e0\u3001\u30d7\u30ed\u30c0\u30af\u30c8\u30de\u30cd\u30b8\u30e3\u30fc\u306e\u76f8\u539f\u3067\u3059\u3002 2026\u5e745\u6708\u306f\u3001PHP \u5168\u7cfb\u7d71\u30fbNginx\u30fbApache HT ... <a title=\"KUSANAGI 9 \u6700\u65b0\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u307e\u3068\u3081\uff082026\u5e745\u6708\uff09\" class=\"read-more\" href=\"https:\/\/kusanagi.tokyo\/column\/archives\/column_11926\" aria-label=\"KUSANAGI 9 \u6700\u65b0\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u307e\u3068\u3081\uff082026\u5e745\u6708\uff09 \u306b\u3064\u3044\u3066\u3055\u3089\u306b\u8aad\u3080\">Read more<\/a><\/p>\n","protected":false},"author":34,"featured_media":11929,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[113,76,13,15,21],"tags":[107],"series":[78],"journey":[99],"product":[105],"class_list":["post-11926","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","category-nginx","category-oss","category-php","category-wordpress","tag-security","series-kusanagi-pm-blog","journey-run","product-kusanagi","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-33","no-featured-image-padding"],"_links":{"self":[{"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/posts\/11926","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/comments?post=11926"}],"version-history":[{"count":2,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/posts\/11926\/revisions"}],"predecessor-version":[{"id":11932,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/posts\/11926\/revisions\/11932"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/media\/11929"}],"wp:attachment":[{"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/media?parent=11926"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/categories?post=11926"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/tags?post=11926"},{"taxonomy":"series","embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/series?post=11926"},{"taxonomy":"journey","embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/journey?post=11926"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/kusanagi.tokyo\/column\/wp-json\/wp\/v2\/product?post=11926"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}