Log in Start free

Vulnerability · Published Mar 9, 2026 · Assigned by jpcert

CVE-2026-28267

Medium 5.5

In plain English

A medium-severity incorrect default permissions in DigitalArts@Cloud Agent (for Windows) from Digital Arts Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.0)5.5Medium
Exploit odds (30 days)0.1%top 98.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.

Affected products (as reported)

VendorProductVersions
Digital Arts Inc. i-フィルター 10 (Windows version only) prior to Ver.10.02.00
Digital Arts Inc. i-フィルター 6.0 prior to Ver.6.00.57
Digital Arts Inc. i-フィルター for ネットカフェ prior to Ver.6.10.57
Digital Arts Inc. i-フィルター for マルチデバイス (Windows version only) prior to Ver.6.00.57
Digital Arts Inc. i-フィルター for ZAQ (Windows version only) prior to Ver.6.00.57
Digital Arts Inc. i-フィルター for プロバイダー prior to Ver.2.00.30
Digital Arts Inc. i-FILTER ブラウザー＆クラウド MultiAgent for Windows prior to Ver.4.93R13
Digital Arts Inc. DigitalArts@Cloud Agent (for Windows) prior to Ver.1.70R01
OPTiM Corporation Optimal Biz Web Filtering Powered by i-FILTER (Windows version) prior to 4.93R13
Inventit Inc. MobiConnect i-FILTER Browser Option MultiAgent for Windows prior to Ver.4.93R13
Fujitsu Limited i-FILTER Browser & Cloud MultiAgent for Windows prior to Ver.4.93R13

Weakness: CWE-276 · Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References