• 發布單位:TWCERT/CC
• 更新日期:2025-07-16
• 點閱次數:329

• 內容說明：

CISA於7/7至7/13在Known Exploited Vulnerabilities Catalog(KEV)中發布5個已遭駭客利用之漏洞。

• 影響平台：

Citrix｜NetScaler ADC and Gateway

Synacor｜Zimbra Collaboration Suite (ZCS)

Rails｜Ruby on Rails

PHP｜PHPMailer

Looking Glass｜Multi-Router Looking Glass (MRLG)

• 處置建議：

修補說明請參考以下官方連結：

Citrix｜NetScaler ADC and Gateway

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420

Synacor｜Zimbra Collaboration Suite (ZCS)

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

https://wiki.zimbra.com/wiki/Security_Center

Rails｜Ruby on Rails

https://web.archive.org/web/20190313201629/https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/

PHP｜PHPMailer

https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18

https://github.com/advisories/GHSA-5f37-gxvh-23v6

Looking Glass｜Multi-Router Looking Glass (MRLG)

https://mrlg.op-sec.us/

• CVE編號：

CVE-2014-3931

CVE-2016-10033

CVE-2019-5418

CVE-2019-9621

CVE-2025-5777