• 發布單位:TWCERT/CC
• 更新日期:2026-05-22
• 點閱次數:202

• 內容說明

CISA於5/11至5/17在Known Exploited Vulnerabilities Catalog(KEV)中發布2個已遭駭客利用之漏洞。

• 影響平台

Microsoft｜Microsoft

Cisco｜Catalyst SD-WAN

• 處置建議

修補說明請參考以下官方連結：

Microsoft｜Microsoft

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-42897

https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service

Cisco｜Catalyst SD-WAN

https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems

https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW

• CVE編號

CVE-2026-20182

CVE-2026-42897