• 發布單位:TWCERT/CC
• 更新日期:2026-07-02
• 點閱次數:118

• 內容說明

CISA於6/15至6/21在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

• 影響平台

Cisco｜Catalyst SD-WAN Manager

LiteSpeed｜cPanel Plugin

Splunk｜Enterprise

Widget Factory｜Joomla Content Editor

• 處置建議

修補說明請參考以下官方連結：

Cisco｜Catalyst SD-WAN Manager

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

LiteSpeed｜cPanel Plugin

https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Splunk｜Enterprise

https://advisory.splunk.com/advisories/SVD-2026-0603

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Widget Factory｜Joomla Content Editor

https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites

https://www.joomlacontenteditor.net/support/changelog/editor

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

• CVE編號

CVE-2026-20253

CVE-2026-20262

CVE-2026-48907

CVE-2026-54420