• 發布單位:TWCERT/CC
• 更新日期:2026-07-02
• 點閱次數:271

• 內容說明

CISA於6/22至6/28在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

• 影響平台

Cisco｜Unified Communications Manager

Lantronix｜EDS5000

PTC｜Windchill and FlexPLM

Ubiquiti｜UniFi OS

• 處置建議

修補說明請參考以下官方連結：

Cisco｜Unified Communications Manager

https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Lantronix｜EDS5000

https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

PTC｜Windchill and FlexPLM

https://www.ptc.com/en/support/article/CS473270

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Ubiquiti｜UniFi OS

https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

• CVE編號

CVE-2025-67038

CVE-2026-12569

CVE-2026-20230

CVE-2026-34908

CVE-2026-34909

CVE-2026-34910