• 發布單位:TWCERT/CC
• 更新日期:2026-07-16
• 點閱次數:658

• 內容說明

CISA於7/6至7/12在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

• 影響平台

Adobe｜ColdFusion

Balbooa｜Forms

iCagenda｜iCagenda

Joomlack｜Page Builder

JoomShaper｜SP Page Builder

Langflow｜Langflow

• 處置建議

修補說明請參考以下官方連結：

Adobe｜ColdFusion

https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Balbooa｜Forms

https://www.balbooa.com/joomla-forms

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

iCagenda｜iCagenda

https://www.icagenda.com/#download

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Joomlack｜Page Builder

https://www.joomlack.fr/en/joomla-extensions/page-builder-ck

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

JoomShaper｜SP Page Builder

https://extensions.joomla.org/extension/sp-page-builder/

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Langflow｜Langflow

https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

• CVE編號

CVE-2026-48282

CVE-2026-48908

CVE-2026-48939

CVE-2026-55255

CVE-2026-56290

CVE-2026-56291