• 發布單位:TWCERT/CC
• 更新日期:2026-10-13
• 點閱次數:153

• 內容說明

CISA於9/28至10/4在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

• 影響平台

Apple｜Multiple Products

Cisco｜Catalyst SD-WAN Manager

Citrix｜NetScaler

Fortinet｜FortiMail

Zammad GmbH｜Zammad

• 處置建議

修補說明請參考以下官方連結：

Apple｜Multiple Products

CVE-2026-86950

https://support.apple.com/en-us/149226

https://support.apple.com/en-us/149228

https://support.apple.com/en-us/149229

https://nvd.nist.gov/vuln/detail/CVE-2026-86950

Cisco｜Catalyst SD-WAN Manager

CVE-2026-76504

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU

https://nvd.nist.gov/vuln/detail/CVE-2026-76504

Citrix｜NetScaler

CVE-2026-88779

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174

https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/

https://nvd.nist.gov/vuln/detail/CVE-2026-88779

Fortinet｜FortiMail

CVE-2026-104286

https://fortiguard.fortinet.com/psirt/FG-IR-26-175

https://nvd.nist.gov/vuln/detail/CVE-2026-104286

Zammad GmbH｜Zammad

CVE-2026-102489, CVE-2026-102490

https://zammad.com/en/product/releases/

https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2

https://nvd.nist.gov/vuln/detail/CVE-2026-102489

https://nvd.nist.gov/vuln/detail/CVE-2026-102490