Impact and mitigations for Linux kernel vulnerability CVE-2026-98432
Users running Linux servers are advised to check security notices and apply kernel updates for vulnerability CVE-2026-98432.
Temporary suspension of PDF export in Cloud Accounting due to security response
Money Forward Cloud Accounting has temporarily suspended standard PDF export due to a security response and provided alternative methods.
Permanent fix applied for PHP vulnerabilities in Waiter admin screen
A permanent fix for PHP vulnerabilities has been applied to the Waiter admin screen in ver. 2.46.2.
PHP vulnerabilities resolved in Admin Console and Self-Service
PHP vulnerabilities have been resolved in Admin Console and Self-Service version 1.14.3.
PHP vulnerability maintenance completed and site display resumed
Maintenance for critical PHP vulnerabilities was completed, restoring site display and administrative tools.
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 do not affect Mackerel
The Mackerel service infrastructure and official mackerel-agent do not use PHP and are unaffected by the disclosed PHP vulnerabilities.
LIFF SDK XSS vulnerability disclosure and usage restrictions on older versions
Due to an XSS vulnerability in older LIFF SDK versions, LINE plans to restrict the use of affected versions in external browsers.
Vulnerabilities in Movable Type allow remote code execution and data leaks
You must update Movable Type or apply file workarounds due to vulnerabilities that allow remote code execution and data leaks.
API key access and IDCF account login are suspended for IDCF Cloud plans
As a preventive measure, existing API key access and IDCF account login have been suspended for IDCF Free and IDCF Free+ plans.
You can now configure report permissions in Money Forward Cloud Payroll
All organizations can now create roles to separate report viewing permissions from operational task permissions.
LIFF v2.31.1 security bug fix and deprecation of v2.20.0 to v2.31.0
LIFF v2.31.1 fixes a potential security bug in the LIFF SDK, and versions v2.20.0 through v2.31.0 have been deprecated.
Google Pay now filters card brands and supports 3D Secure authentication
You can now use 3D Secure authentication and card brand filtering in Google Pay.
LIFF v2.31.0 release, deprecation due to vulnerability, and planned usage restriction
After LIFF v2.31.0 was released with internal behavior changes, it was deprecated due to a security bug and faces planned usage limits.
In Cloud Payroll, display names changed and Payroll Admins can now sync
In Cloud Payroll, HR service names changed to HR Master, and users with the Payroll Admin role can now sync employee information.
Administrators can now control and restrict Web API users in CloudSign
Administrators can restrict Web API users and manage client ID issuance, deletion, and audit logging.
LIFF v2.30.0 release, subsequent deprecation due to security flaw, and planned restriction
LIFF v2.30.0 added arguments to three friendship and permission methods, but was later deprecated due to a security issue with usage restrictions planned.
Live and Test mode 3D Secure authentication migrated to Netcetera
3D Secure authentication has migrated to Netcetera.
LIFF v2.29.2 release, deprecation due to a security issue, and planned usage restrictions
LIFF v2.29.2 was released with internal SDK behavior changes, then deprecated due to a security issue with usage restrictions planned.
You can now set read permissions for each environment
You can now restrict the environments members can access by managing read permissions for each environment in role settings.
LIFF v2.29.1 release, deprecation due to a security bug, and planned usage restrictions
LIFF v2.29.1 was released with internal behavior changes, then deprecated due to a security issue with usage restrictions planned.
