• 發布單位:TWCERT/CC
• 更新日期:2026-08-21
• 點閱次數:357

• 內容說明

CISA於8/10至8/16在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

• 影響平台

Cisco｜Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)

Metabase｜Metabase

Microsoft｜Windows Ancillary Function Driver for WinSock

• 處置建議

修補說明請參考以下官方連結：

Cisco｜Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Metabase｜Metabase

https://www.metabase.com/blog/security-update

https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

Microsoft｜Windows Ancillary Function Driver for WinSock

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

• CVE編號

CVE-2026-20349

CVE-2026-68820

CVE-2026-72898