Microsoft Edge 多個漏洞

發佈日期: 2026年03月09日

風險: 中度風險

類型: 用戶端 - 瀏覽器

於 Microsoft Edge 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行任意程式碼、阻斷服務狀況、繞過保安限制、資料篡改及洩露敏感資料。

---

影響

• 遠端執行程式碼
• 阻斷服務
• 資料洩露
• 繞過保安限制
• 篡改

---

受影響之系統或技術

• Microsoft Edge 145.0.3800.97 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 145.0.3800.97 或之後版本

---

漏洞識別碼

• CVE-2026-3536
• CVE-2026-3538
• CVE-2026-3539
• CVE-2026-3540
• CVE-2026-3541
• CVE-2026-3542
• CVE-2026-3543
• CVE-2026-3544
• CVE-2026-3545

---

資料來源

• Microsoft Edge

---

相關連結

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3536
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3538
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3539
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3540
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3541
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3542
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3543
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3544
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3545

Microsoft Edge Multiple Vulnerabilities

Release Date: 9 Mar 2026

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, denial of service condition, security restriction bypass, data manipulation and sensitive information disclosure on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service
• Information Disclosure
• Security Restriction Bypass
• Data Manipulation

---

System / Technologies affected

• Microsoft Edge version prior to 145.0.3800.97

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 145.0.3800.97 or later

---

Vulnerability Identifier

• CVE-2026-3536
• CVE-2026-3538
• CVE-2026-3539
• CVE-2026-3540
• CVE-2026-3541
• CVE-2026-3542
• CVE-2026-3543
• CVE-2026-3544
• CVE-2026-3545

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3536
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3538
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3539
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3540
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3541
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3542
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3543
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3544
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3545

pac4j-jwt 繞過保安限制漏洞

發佈日期: 2026年03月09日

風險: 中度風險

類型: 伺服器 - 網站伺服器

於 pac4j-jwt 發現一個漏洞。遠端攻擊者可利用此漏洞，於目標系統觸發繞過保安限制。

 

注意：

CVE-2026-29000 的概念驗證碼已被公開。攻擊者若掌握伺服器的 RSA 公鑰，即可建立包含任意主題和角色聲明的 JWE 封裝的 PlainJWT，從而繞過簽章驗證，以包含管理員在內的任何使用者身分進行驗證。因此，風險等級被評為中等風險。

---

影響

• 繞過保安限制

---

受影響之系統或技術

• 如果您使用的是 4.x 系列版本：請升級至 4.5.9（或更高版本）

• 如果您使用的是 5.x 系列版本：請升級至 5.7.9（或更高版本）

• 如果您使用的是 6.x 系列版本：請升級至 6.3.3（或更高版本）

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://www.pac4j.org/blog/security-advisory-pac4j-jwt-jwtauthenticator.html

---

漏洞識別碼

• CVE-2026-29000

---

資料來源

• pac4j-jwt

---

相關連結

• https://www.pac4j.org/blog/security-advisory-pac4j-jwt-jwtauthenticator.html

pac4j-jwt Security Restriction Bypass Vulnerability

Release Date: 9 Mar 2026

RISK: Medium Risk

TYPE: Servers - Web Servers

A vulnerability has been identified in pac4j-jwt. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

 

Note:

Proof of Concept exploit code Is publicly available for CVE-2026-29000. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypassing signature verification to authenticate as any user including administrators. Hence, the risk level is rated as Medium Risk.

---

Impact

• Security Restriction Bypass

---

System / Technologies affected

• If you use the 4.x line: upgrade to 4.5.9 (or newer)
• If you use the 5.x line: upgrade to 5.7.9 (or newer)
• If you use the 6.x line: upgrade to 6.3.3 (or newer)

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.pac4j.org/blog/security-advisory-pac4j-jwt-jwtauthenticator.html

---

Vulnerability Identifier

• CVE-2026-29000

---

Source

• pac4j-jwt

---

Related Link

• https://www.pac4j.org/blog/security-advisory-pac4j-jwt-jwtauthenticator.html

Google Chrome 多個漏洞

發佈日期: 2026年03月06日

風險: 中度風險

類型: 用戶端 - 瀏覽器

於 Google Chrome 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行任意程式碼、阻斷服務狀況、繞過保安限制、資料篡改及洩露敏感資料。

 

---

影響

• 資料洩露
• 篡改
• 繞過保安限制
• 阻斷服務
• 遠端執行程式碼

---

受影響之系統或技術

• Google Chrome 145.0.7632.159 (Linux) 之前的版本
• Google Chrome 145.0.7632.159/160 (Mac) 之前的版本
• Google Chrome 145.0.7632.159/160 (Windows) 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 145.0.7632.159 (Linux) 或之後版本
• 更新至 145.0.7632.159/160 (Mac) 或之後版本
• 更新至 145.0.7632.159/160 (Windows) 或之後版本

---

漏洞識別碼

• CVE-2026-3536
• CVE-2026-3537
• CVE-2026-3538
• CVE-2026-3539
• CVE-2026-3540
• CVE-2026-3541
• CVE-2026-3542
• CVE-2026-3543
• CVE-2026-3544
• CVE-2026-3545

---

資料來源

• Google Chrome

---

相關連結

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html

Google Chrome Multiple Vulnerabilities

Release Date: 6 Mar 2026

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, denial of service condition, security restriction bypass, data manipulation and sensitive information disclosure on the targeted system.

---

Impact

• Information Disclosure
• Data Manipulation
• Security Restriction Bypass
• Denial of Service
• Remote Code Execution

---

System / Technologies affected

• Google Chrome prior to 145.0.7632.159 (Linux)
• Google Chrome prior to 145.0.7632.159/160 (Mac)
• Google Chrome prior to 145.0.7632.159/160 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 145.0.7632.159 (Linux) or later
• Update to version 145.0.7632.159/160 (Mac) or later
• Update to version 145.0.7632.159/160 (Windows) or later

---

Vulnerability Identifier

• CVE-2026-3536
• CVE-2026-3537
• CVE-2026-3538
• CVE-2026-3539
• CVE-2026-3540
• CVE-2026-3541
• CVE-2026-3542
• CVE-2026-3543
• CVE-2026-3544
• CVE-2026-3545

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html

Aruba Products Multiple Vulnerabilities

Release Date: 5 Mar 2026

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Aruba Products. A remote attacker could exploit these vulnerabilities to trigger denial of service condition, security restriction bypass, sensitive information disclosure and spoofing on the targeted system.

---

Impact

• Spoofing
• Information Disclosure
• Security Restriction Bypass
• Denial of Service

---

System / Technologies affected

• AOS-8.10.x.x: 8.10.0.21 and below
• AOS-8.12.x.x: 8.12.0.6 and below
• AOS-8.13.x.x: 8.13.1.1 and below
• AOS-10.4.x.x: 10.4.1.10 and below
• AOS-10.7.x.x: 10.7.2.2 and below
• AOS-10.8.x.x: 10.8.0.0 and below

 

HPE Aruba Networking End of Maintenance (EoM) Software Version(s):

 

• AOS-10.6.x.x: all
• AOS-10.5.x.x: all
• AOS-10.3.x.x: all
• AOS-8.12.x.x: all
• AOS-8.11.x.x: all
• AOS-8.9.x.x: all
• AOS-8.8.x.x: all
• AOS-8.7.x.x: all
• AOS-8.6.x.x: all
• AOS-6.5.4.x: all
• SD-WAN 8.7.0.0-2.3.0.x: all
• SD-WAN 8.6.0.4-2.2.x.x: all

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US

Note: End of Maintenance (EoM) versions are not addressed by the provided solution.

---

Vulnerability Identifier

• CVE-2026-00212
• CVE-2026-00213
• CVE-2026-00214
• CVE-2026-00215
• CVE-2026-00216
• CVE-2026-00219

---

Source

• Aruba

---

Related Link

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US

思科產品多個漏洞

發佈日期: 2026年03月05日

風險: 中度風險

類型: 保安軟件及應用設備 - 保安軟件及應用設備

於思科產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、彷冒、遠端執行任意程式碼、洩露敏感資料、跨網站指令碼、資料篡改及繞過保安限制。

---

影響

• 阻斷服務
• 繞過保安限制
• 遠端執行程式碼
• 跨網站指令碼
• 資料洩露
• 仿冒
• 篡改
• 權限提升

---

受影響之系統或技術

• Cisco Secure Firewall Adaptive Security Appliance (ASA)
• Cisco Secure Firewall Management Center (FMC)
• Cisco Secure Firewall Threat Defense (FTD)
• ClamAV

請參考供應商發佈的連結以了解受影響的版本：

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

---

漏洞識別碼

• CVE-2024-20340
• CVE-2024-20358
• CVE-2026-20001
• CVE-2026-20002
• CVE-2026-20003
• CVE-2026-20006
• CVE-2026-20007
• CVE-2026-20008
• CVE-2026-20009
• CVE-2026-20013
• CVE-2026-20014
• CVE-2026-20015
• CVE-2026-20016
• CVE-2026-20017
• CVE-2026-20018
• CVE-2026-20020
• CVE-2026-20021
• CVE-2026-20022
• CVE-2026-20023
• CVE-2026-20024
• CVE-2026-20025
• CVE-2026-20031
• CVE-2026-20039
• CVE-2026-20044
• CVE-2026-20049
• CVE-2026-20050
• CVE-2026-20052
• CVE-2026-20062
• CVE-2026-20063
• CVE-2026-20064
• CVE-2026-20069
• CVE-2026-20070
• CVE-2026-20073
• CVE-2026-20079
• CVE-2026-20082
• CVE-2026-20100
• CVE-2026-20101
• CVE-2026-20102
• CVE-2026-20103
• CVE-2026-20105
• CVE-2026-20106
• CVE-2026-20131

---

資料來源

• Cisco

---

相關連結

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

Cisco Products Multiple Vulnerabilities

Release Date: 5 Mar 2026

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Cisco products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, spoofing, remote code execution, sensitive information disclosure, cross-site scripting, data manipulation and security restriction bypass on the targeted system.

---

Impact

• Denial of Service
• Security Restriction Bypass
• Remote Code Execution
• Cross-Site Scripting
• Information Disclosure
• Spoofing
• Data Manipulation
• Elevation of Privilege

---

System / Technologies affected

• Cisco Secure Firewall Adaptive Security Appliance (ASA)
• Cisco Secure Firewall Management Center (FMC)
• Cisco Secure Firewall Threat Defense (FTD)
• ClamAV

For affected versions, please refer to the link issued by the vendor:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

---

Vulnerability Identifier

• CVE-2024-20340
• CVE-2024-20358
• CVE-2026-20001
• CVE-2026-20002
• CVE-2026-20003
• CVE-2026-20006
• CVE-2026-20007
• CVE-2026-20008
• CVE-2026-20009
• CVE-2026-20013
• CVE-2026-20014
• CVE-2026-20015
• CVE-2026-20016
• CVE-2026-20017
• CVE-2026-20018
• CVE-2026-20020
• CVE-2026-20021
• CVE-2026-20022
• CVE-2026-20023
• CVE-2026-20024
• CVE-2026-20025
• CVE-2026-20031
• CVE-2026-20039
• CVE-2026-20044
• CVE-2026-20049
• CVE-2026-20050
• CVE-2026-20052
• CVE-2026-20062
• CVE-2026-20063
• CVE-2026-20064
• CVE-2026-20069
• CVE-2026-20070
• CVE-2026-20073
• CVE-2026-20079
• CVE-2026-20082
• CVE-2026-20100
• CVE-2026-20101
• CVE-2026-20102
• CVE-2026-20103
• CVE-2026-20105
• CVE-2026-20106
• CVE-2026-20131

---

Source

• Cisco

---

Related Link

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

Android 多個漏洞

發佈日期: 2026年03月03日

風險: 中度風險

類型: 操作系統 - 流動裝置及操作系統

於 Android 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發執行任意程式碼、洩露敏感資料、阻斷服務狀況及權限提升。

---

影響

• 權限提升
• 阻斷服務
• 資料洩露
• 遠端執行程式碼

---

受影響之系統或技術

• 2026-03-05 前的 Android 保安更新級別

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

• 安裝軟件供應商提供的修補程式：
  https://source.android.com/docs/security/bulletin/2026/2026-03-01

---

漏洞識別碼

• CVE-2024-43766
• CVE-2024-43859
• CVE-2025-32313
• CVE-2025-38616
• CVE-2025-38618
• CVE-2025-39682
• CVE-2025-39946
• CVE-2025-40266
• CVE-2025-48544
• CVE-2025-48567
• CVE-2025-48568
• CVE-2025-48574
• CVE-2025-48577
• CVE-2025-48578
• CVE-2025-48579
• CVE-2025-48582
• CVE-2025-48585
• CVE-2025-48587
• CVE-2025-48602
• CVE-2025-48605
• CVE-2025-48609
• CVE-2025-48619
• CVE-2025-48630
• CVE-2025-48631
• CVE-2025-48634
• CVE-2025-48635
• CVE-2025-48641
• CVE-2025-48642
• CVE-2025-48644
• CVE-2025-48645
• CVE-2025-48646
• CVE-2025-48650
• CVE-2025-48653
• CVE-2025-48654
• CVE-2025-64783
• CVE-2025-64784
• CVE-2025-64893
• CVE-2026-0005
• CVE-2026-0006
• CVE-2026-0007
• CVE-2026-0008
• CVE-2026-0010
• CVE-2026-0011
• CVE-2026-0012
• CVE-2026-0013
• CVE-2026-0014
• CVE-2026-0015
• CVE-2026-0017
• CVE-2026-0020
• CVE-2026-0021
• CVE-2026-0023
• CVE-2026-0024
• CVE-2026-0025
• CVE-2026-0026
• CVE-2026-0027
• CVE-2026-0028
• CVE-2026-0029
• CVE-2026-0030
• CVE-2026-0031
• CVE-2026-0032
• CVE-2026-0034
• CVE-2026-0035
• CVE-2026-0037
• CVE-2026-0038
• CVE-2026-0047

---

資料來源

• Android

---

相關連結

• https://source.android.com/docs/security/bulletin/2026/2026-03-01

Android Multiple Vulnerabilities

Release Date: 3 Mar 2026

RISK: Medium Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Android. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, sensitive information disclosure, denial of service condition and elevation of privilege on the targeted system.

---

Impact

• Elevation of Privilege
• Denial of Service
• Information Disclosure
• Remote Code Execution

---

System / Technologies affected

• Android security patch level prior to 2026-03-05

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:
  https://source.android.com/docs/security/bulletin/2026/2026-03-01

---

Vulnerability Identifier

• CVE-2024-43766
• CVE-2024-43859
• CVE-2025-32313
• CVE-2025-38616
• CVE-2025-38618
• CVE-2025-39682
• CVE-2025-39946
• CVE-2025-40266
• CVE-2025-48544
• CVE-2025-48567
• CVE-2025-48568
• CVE-2025-48574
• CVE-2025-48577
• CVE-2025-48578
• CVE-2025-48579
• CVE-2025-48582
• CVE-2025-48585
• CVE-2025-48587
• CVE-2025-48602
• CVE-2025-48605
• CVE-2025-48609
• CVE-2025-48619
• CVE-2025-48630
• CVE-2025-48631
• CVE-2025-48634
• CVE-2025-48635
• CVE-2025-48641
• CVE-2025-48642
• CVE-2025-48644
• CVE-2025-48645
• CVE-2025-48646
• CVE-2025-48650
• CVE-2025-48653
• CVE-2025-48654
• CVE-2025-64783
• CVE-2025-64784
• CVE-2025-64893
• CVE-2026-0005
• CVE-2026-0006
• CVE-2026-0007
• CVE-2026-0008
• CVE-2026-0010
• CVE-2026-0011
• CVE-2026-0012
• CVE-2026-0013
• CVE-2026-0014
• CVE-2026-0015
• CVE-2026-0017
• CVE-2026-0020
• CVE-2026-0021
• CVE-2026-0023
• CVE-2026-0024
• CVE-2026-0025
• CVE-2026-0026
• CVE-2026-0027
• CVE-2026-0028
• CVE-2026-0029
• CVE-2026-0030
• CVE-2026-0031
• CVE-2026-0032
• CVE-2026-0034
• CVE-2026-0035
• CVE-2026-0037
• CVE-2026-0038
• CVE-2026-0047

---

Source

• Android

---

Related Link

• https://source.android.com/docs/security/bulletin/2026/2026-03-01