• 發布單位:TWCERT/CC
• 更新日期:2026-07-29
• 點閱次數:281

• 內容說明

CISA於7/13至7/19在Known Exploited Vulnerabilities Catalog(KEV)中發布10個已遭駭客利用之漏洞。

• 影響平台

Cisco｜IOS

Fortinet｜FortiSandbox

KNX Association｜KNX Protocol Connection Authorization Option 1

Microsoft｜Active Directory Federation Services

Microsoft｜SharePoint

Microsoft｜SharePoint Server

Oracle｜E-Business Suite

SonicWall｜SMA1000 Appliances

• 處置建議

修補說明請參考以下官方連結：

Cisco｜IOS

https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Fortinet｜FortiSandbox

https://fortiguard.fortinet.com/psirt/FG-IR-26-141

https://fortiguard.fortinet.com/psirt/FG-IR-26-100

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

KNX Association｜KNX Protocol Connection Authorization Option 1

https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-01

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Microsoft｜Active Directory Federation Services

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56155

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Microsoft｜SharePoint

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Microsoft｜SharePoint Server

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Oracle｜E-Business Suite

https://www.oracle.com/security-s/cspumay2026.html

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

SonicWall｜SMA1000 Appliances

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

• CVE編號

CVE-2008-4128

CVE-2023-4346

CVE-2026-15409

CVE-2026-15410

CVE-2026-25089

CVE-2026-39808

CVE-2026-46817

CVE-2026-56155

CVE-2026-56164

CVE-2026-58644