內容說明

CISA於7/7至7/13在Known Exploited Vulnerabilities Catalog(KEV)中發布5個已遭駭客利用之漏洞。

 

影響平台

Citrix｜NetScaler ADC and Gateway
Synacor｜Zimbra Collaboration Suite (ZCS)
Rails｜Ruby on Rails
PHP｜PHPMailer
Looking Glass｜Multi-Router Looking Glass (MRLG)

 

處置建議

 
修補說明請參考以下官方連結：

Citrix｜NetScaler ADC and Gateway
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420

Synacor｜Zimbra Collaboration Suite (ZCS)
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
https://wiki.zimbra.com/wiki/Security_Center

Rails｜Ruby on Rails
https://web.archive.org/web/20190313201629/https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/

PHP｜PHPMailer
https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18
https://github.com/advisories/GHSA-5f37-gxvh-23v6

Looking Glass｜Multi-Router Looking Glass (MRLG)
https://mrlg.op-sec.us/

  

CVE編號

CVE-2014-3931
CVE-2016-10033
CVE-2019-5418
CVE-2019-9621
CVE-2025-5777

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2014-3931
3. https://nvd.nist.gov/vuln/detail/CVE-2016-10033
4. https://nvd.nist.gov/vuln/detail/CVE-2019-5418
5. https://nvd.nist.gov/vuln/detail/CVE-2019-9621
6. https://nvd.nist.gov/vuln/detail/CVE-2025-5777

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/b146c5ac-09e5-473f-9d89-13a2ba7a6302/
發布日期：15/07/2025