• 發布單位:TWCERT/CC
• 更新日期:2026-03-19
• 點閱次數:250

• 內容說明

CISA於3/9至3/15在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

• 影響平台

Google｜Chromium V8

Google｜Skia

Ivanti｜Endpoint Manager(EPM)

n8n｜n8n

Omnissa｜Workspace One UEM

SolarWinds｜Web Help Desk

• 處置建議

修補說明請參考以下官方連結：

Google｜Chromium V8

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html

Google｜Skia

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html#:~:text=Google%20is%20aware

Ivanti｜Endpoint Manager(EPM)

https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US

n8n｜n8n

https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp

Omnissa｜Workspace One UEM

https://web.archive.org/web/20211222154335/https://www.vmware.com/security/advisories/VMSA-2021-0029.html

SolarWinds｜Web Help Desk

https://www.solarwinds.com/trust-center/security-advisories/cve-2025-26399

https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm

• CVE編號

CVE-2021-22054

CVE-2025-26399

CVE-2025-68613

CVE-2026-1603

CVE-2026-3909

CVE-2026-3910