4/27至5/3 Known Exploited Vulnerabilities Catalog(KEV)週報
- 發布單位:TWCERT/CC
- 更新日期:2026-05-06
- 點閱次數:27
- 內容說明
CISA於4/27至5/3在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。
- 影響平台
ConnectWise｜ScreenConnect
Linux｜Kernel
Microsoft｜Windows
WebPros｜cPanel & WHM and WP2 (WordPress Squared)
- 處置建議
修補說明請參考以下官方連結：
ConnectWise｜ScreenConnect
https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8
Linux｜Kernel
https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/
https://xint.io/blog/copy-fail-linux-distributions#the-fix-6
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/
Microsoft｜Windows
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32202
WebPros｜cPanel & WHM and WP2 (WordPress Squared)
https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026
https://docs.cpanel.net/release-notes/release-notes/
https://docs.wpsquared.com/changelogs/versions/changelog/#13617
- CVE編號
CVE-2024-1708
CVE-2026-31431
CVE-2026-32202
CVE-2026-41940