CVE-2026-28267: Multiple i-フィルター products are configured with improper file access permission settings

Description

Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 1% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

DA

DigitalArts@Cloud Agent (for Windows) · Digital Arts Inc.

prior to Ver.1.70R01 · source: vendor

MI

MobiConnect i-FILTER Browser Option MultiAgent for Windows · Inventit Inc.

prior to Ver.4.93R13 · source: vendor

OB

Optimal Biz Web Filtering Powered by i-FILTER (Windows version) · OPTiM Corporation

prior to 4.93R13 · source: vendor

IB

i-FILTER Browser & Cloud MultiAgent for Windows · Fujitsu Limited

prior to Ver.4.93R13 · source: vendor

Iブ

i-FILTER ブラウザー＆クラウド MultiAgent for Windows · Digital Arts Inc.

prior to Ver.4.93R13 · source: vendor

I1

i-フィルター 10 (Windows version only) · Digital Arts Inc.

prior to Ver.10.02.00 · source: vendor

I6

i-フィルター 6.0 · Digital Arts Inc.

prior to Ver.6.00.57 · source: vendor

IF

i-フィルター for ZAQ (Windows version only) · Digital Arts Inc.

prior to Ver.6.00.57 · source: vendor

IF

i-フィルター for ネットカフェ · Digital Arts Inc.

prior to Ver.6.10.57 · source: vendor

IF

i-フィルター for プロバイダー · Digital Arts Inc.

prior to Ver.2.00.30 · source: vendor

IF

i-フィルター for マルチデバイス (Windows version only) · Digital Arts Inc.

prior to Ver.6.00.57 · source: vendor