• 發布單位:TWCERT/CC
• 更新日期:2026-10-13
• 點閱次數:112

• 內容說明

CISA於9/21至9/27在Known Exploited Vulnerabilities Catalog(KEV)中發布12個已遭駭客利用之漏洞。

• 影響平台

Adobe｜Commerce and Magento

Arista｜VeloCloud Orchestrator

Check Point｜Multiple Products

Citrix｜NetScaler

F5｜BIG-IP APM

Microsoft｜SharePoint

MikroTik｜RouterOS

WordPress｜Core

WSO2｜Multiple Products

Zyxel｜GS1900 Series Switches

• 處置建議

修補說明請參考以下官方連結：

Adobe｜Commerce and Magento

CVE-2026-71362

https://helpx.adobe.com/security/products/magento/apsb26-92.html

https://nvd.nist.gov/vuln/detail/CVE-2026-71362

Arista｜VeloCloud Orchestrator

CVE-2026-93952

https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183

https://nvd.nist.gov/vuln/detail/CVE-2026-93952

Check Point｜Multiple Products

CVE-2026-85102, CVE-2026-93616

https://support.checkpoint.com/results/sk/sk1000117/

https://support.checkpoint.com/results/sk/sk1000171/

https://nvd.nist.gov/vuln/detail/CVE-2026-85102

https://nvd.nist.gov/vuln/detail/CVE-2026-93616

Citrix｜NetScaler

CVE-2026-88771, CVE-2026-88772

https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096

https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html

https://nvd.nist.gov/vuln/detail/CVE-2026-88771

https://nvd.nist.gov/vuln/detail/CVE-2026-88772

F5｜BIG-IP APM

CVE-2026-94127

https://my.f5.com/manage/s/article/K000162605

https://nvd.nist.gov/vuln/detail/CVE-2026-94127

Microsoft｜SharePoint

CVE-2026-65660

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660

https://nvd.nist.gov/vuln/detail/CVE-2026-65660

MikroTik｜RouterOS

CVE-2026-67279

https://mikrotik.com/supportsec/september-2026-vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2026-67279

WordPress｜Core

CVE-2026-87902

https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp

https://nvd.nist.gov/vuln/detail/CVE-2026-87902

WSO2｜Multiple Products

CVE-2026-5430

https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/

https://nvd.nist.gov/vuln/detail/CVE-2026-5430

Zyxel｜GS1900 Series Switches

CVE-2026-7273

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026

https://nvd.nist.gov/vuln/detail/cve-2026-7273