CVE-2026-28267

MEDIUM

6.8

CVSS Score

Published: March 9, 2026 at 10:28 PM UTC

Updated: June 17, 2026 at 10:28 AM UTC

10 products affected across 4 vendorsi-FILTERi-FILTER Browser & Cloud MultiAgentI Filter for Netcafe

Using i-フィルター 10 (Windows version only) by Digital Arts Inc.?

Get instant alerts when new vulnerabilities affect i-フィルター 10 (Windows version only) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.8

Exploit prediction

EPSS 0.1%

SSVC

No known exploit

Description

Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

DigitalArts@Cloud Agent · Digital Arts

60%

v < er.1.70R01

Affected range stops below er.1.70R01, so it looks safe — our inference, not a vendor statement

i-FILTER · Digital Arts

60%

v < er.10.02.00v < er.6.00.57

Affected range stops below er.10.02.00, so it looks safe — our inference, not a vendor statement

Affected range stops below er.6.00.57, so it looks safe — our inference, not a vendor statement

i-FILTER Browser & Cloud MultiAgent · Digital Arts

60%

v < er.4.93R13

Affected range stops below er.4.93R13, so it looks safe — our inference, not a vendor statement

I Filter for Multidevice · Digital Arts

60%

v < er.6.00.57

Affected range stops below er.6.00.57, so it looks safe — our inference, not a vendor statement

I Filter for Netcafe · Digital Arts

60%

v < er.6.10.57

Affected range stops below er.6.10.57, so it looks safe — our inference, not a vendor statement

i-FILTER for Provider · Digital Arts

60%

v < er.2.00.30

Affected range stops below er.2.00.30, so it looks safe — our inference, not a vendor statement

i-FILTER for ZAQ · Digital Arts

60%

v < er.6.00.57

Affected range stops below er.6.00.57, so it looks safe — our inference, not a vendor statement

I Filter Browser and Cloud · Fujitsu

60%

v < er.4.93R13

Affected range stops below er.4.93R13, so it looks safe — our inference, not a vendor statement

MobiConnect i-FILTER Browser Option MultiAgent · Inventit

60%

v < er.4.93R13

Affected range stops below er.4.93R13, so it looks safe — our inference, not a vendor statement

Optimal Biz Web Filtering Powered by i-FILTER · Optim

60%

v < 4.93R13

Affected range stops below 4.93R13, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (6)

Source: cverecord

https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260309_01.pdf

Source: cverecord

https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260309_02.pdf

Source: cverecord

https://biz3.optim.co.jp/

Source: cverecord

https://www.mobi-connect.net/file/ifilter/

Source: cverecord

https://sd.fjsd001.dfcenter.jp.fujitsu.com/portal/ja/kb/articles/windows%E3%81%AE%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%83%8E%E3%83%BC%E3%83%88

Source: cverecord

https://jvn.jp/en/jp/JVN17307628/

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.8MEDIUMjpcert

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-276

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card