• 發布單位:TWCERT/CC
• 更新日期:2026-10-13
• 點閱次數:24

• 內容說明

CISA於9/7至9/13在Known Exploited Vulnerabilities Catalog(KEV)中發布14個已遭駭客利用之漏洞。

• 影響平台

Adobe｜Commerce與Magento

Cisco｜Secure Firewall Management Center (FMC)與Security Cloud Control (SCC) Firewall Management

Citrix｜NetScaler

ConnectWise｜ScreenConnect

Fortinet｜FortiOS、FortiSASE及FortiSwitchManager

GitLab｜Community Edition與Enterprise Edition

Google｜Chromium V8

JFrog｜Artifactory

Microsoft｜Windows

MikroTik｜RouterOS

N-able｜N-central

• 處置建議

修補說明請參考以下官方連結：

Adobe｜Commerce與Magento

CVE-2026-75650

https://helpx.adobe.com/security/products/magento/apsb26-146.html

https://nvd.nist.gov/vuln/detail/CVE-2026-75650

Cisco｜Secure Firewall Management Center (FMC)與Security Cloud Control (SCC) Firewall Management

CVE-2026-20079

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

https://nvd.nist.gov/vuln/detail/CVE-2026-20079

Citrix｜NetScaler

CVE-2026-19490

https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html

https://nvd.nist.gov/vuln/detail/CVE-2026-19490

ConnectWise｜ScreenConnect

CVE-2026-84869

https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin

https://nvd.nist.gov/vuln/detail/CVE-2026-84869

Fortinet｜FortiOS、FortiSASE及FortiSwitchManager

CVE-2025-25249

https://fortiguard.fortinet.com/psirt/FG-IR-25-084

https://nvd.nist.gov/vuln/detail/CVE-2025-25249

GitLab｜Community Edition與Enterprise Edition

CVE-2026-85706

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/

https://nvd.nist.gov/vuln/detail/CVE-2026-85706

Google｜Chromium V8

CVE-2026-87491

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html

https://nvd.nist.gov/vuln/detail/CVE-2026-87491

JFrog｜Artifactory

CVE-2026-42016, CVE-2026-42018

https://docs.jfrog.com/releases/docs/jfrog-security-advisories

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

https://nvd.nist.gov/vuln/detail/CVE-2026-42016

https://nvd.nist.gov/vuln/detail/CVE-2026-42018

Microsoft｜Windows

CVE-2026-81963, CVE-2026-85880

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963

https://nvd.nist.gov/vuln/detail/CVE-2026-81963

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880

https://nvd.nist.gov/vuln/detail/CVE-2026-85880

MikroTik｜RouterOS

CVE-2026-67277, CVE-2026-86060

https://mikrotik.com/supportsec/september-2026-vulnerability/

https://nvd.nist.gov/vuln/detail/CVE-2026-67277

https://nvd.nist.gov/vuln/detail/CVE-2026-86060

N-able｜N-central

CVE-2026-86218

https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/

https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution

https://nvd.nist.gov/vuln/detail/CVE-2026-86218