• 發布單位:TWCERT/CC
• 更新日期:2026-08-06
• 點閱次數:363

• 內容說明

CISA於7/27至8/2在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

• 影響平台

Arista｜VeloCloud Orchestrator

Cisco｜Secure Firewall Management Center (FMC)

Fortinet｜FortiOS

• 處置建議

修補說明請參考以下官方連結：

Arista｜VeloCloud Orchestrator

https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Cisco｜Secure Firewall Management Center (FMC)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Fortinet｜FortiOS

https://fortiguard.fortinet.com/psirt/FG-IR-25-934

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

• CVE編號

CVE-2025-68686

CVE-2026-16812

CVE-2026-20316