• 發布單位:TWCERT/CC
• 更新日期:2026-02-26
• 點閱次數:109

• 內容說明

CISA於2/16至2/22在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。

• 影響平台

Dell｜RecoverPoint for Virtual Machines (RP4VMs)

GitLab｜GitLab

Google｜Chromium

Microsoft｜Windows

Roundcube｜Webmail

Synacor｜Zimbra Collaboration Suite

TeamT5｜ThreatSonar Anti-Ransomware

• 處置建議

修補說明請參考以下官方連結：

Dell｜RecoverPoint for Virtual Machines (RP4VMs)

https://www.dell.com/support/kbdoc/en-us/000426773/dsa-2026-079

https://www.dell.com/support/kbdoc/en-us/000426742/recoverpoint-for-vms-apply-the-remediation--for-dsa

https://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day

GitLab｜GitLab

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22175.json

Google｜Chromium

https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html

Microsoft｜Windows

https://web.archive.org/web/20110305211119/https://www.microsoft.com/technet/security/bulletin/ms09-032.mspx

Roundcube｜Webmail

https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10

https://roundcube.net/news/2025/12/13/security-updates-1.6.12-and-1.5.12

https://github.com/roundcube/roundcubemail/releases/tag/1.5.10

https://github.com/roundcube/roundcubemail/releases/tag/1.6.11

https://github.com/roundcube/roundcubemail/commit/bfa032631c36b900e7444dfa278340b33cbf7cdb

Synacor｜Zimbra Collaboration Suite

https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7

TeamT5｜ThreatSonar Anti-Ransomware

https://teamt5.org/en/posts/vulnerability-notice-threat-sonar-anti-ransomware-20240715/

https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html

• CVE編號

CVE-2008-0015

CVE-2020-7796

CVE-2021-22175

CVE-2024-7694

CVE-2025-49113

CVE-2025-68461

CVE-2026-2441

CVE-2026-22769