ChromeOS 多個漏洞
發佈日期: 2026年10月29日
於 ChromeOS
發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、遠端執行任意程式碼及繞過保安限制。
影響
受影響之系統或技術
解決方案
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式，詳情請參閱以下連結：
漏洞識別碼
資料來源
相關連結
ChromeOS Multiple Vulnerabilities
Release Date: 29 Oct 2026
Multiple vulnerabilities were identified in ChromeOS. A
remote attacker could exploit some of these vulnerabilities to trigger denial
of service condition, remote code execution and security restriction bypass on
the targeted system.
Impact
System / Technologies affected
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor. For detail, please refer
to the link below:
Vulnerability Identifier
Source
Related Link
思科產品阻斷服務漏洞
發佈日期: 2026年10月29日
於思科產品發現一個漏洞。遠端攻擊者可利用這個漏洞，於目標系統觸發阻斷服務狀況。
注意：
CVE-2026-76418 正被廣泛利用。此漏洞源於在 Tunnel Group 配置 Secondary Authentication 時出現的邏輯錯誤。攻擊者可在連接
SSL 遠端存取 VPN 時發送特製請求以利用此漏洞。成功利用此漏洞可令受影響裝置重新啟動，造成阻斷服務狀況。因此，此漏洞的風險等級被評為高度風險。
影響
受影響之系統或技術
請參考供應商發佈的連結以了解受影響的版本：
解決方案
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式：
漏洞識別碼
資料來源
相關連結
Cisco Products Denial of Service Vulnerability
Release Date: 29 Oct 2026
A vulnerability was identified in Cisco products. A remote
attacker could exploit this vulnerability to trigger denial of service
condition on the targeted system.
Note:
CVE-2026-76418 is being exploited in the wild. This
vulnerability is due to logic errors when secondary authentication is
configured on a tunnel group. An attacker could exploit this vulnerability by
sending a crafted request when connecting to the SSL remote access VPN. A
successful exploit could allow the attacker to cause the affected device to
reload, resulting in a denial of service condition. Hence, the risk level is
rated as High Risk.
Impact
System / Technologies affected
For affected versions, please refer to the link issued by
the vendor:
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
Source
Related Link
Jenkins 多個漏洞
發佈日期: 2026年10月29日
於 Jenkins 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發跨網站指令碼、權限提升、繞過保安限制、敏感資料洩露、遠端執行任意程式碼及資料篡改。
影響
受影響之系統或技術
解決方案
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式：
漏洞識別碼
資料來源
相關連結
Jenkins Multiple Vulnerabilities
Release Date: 29 Oct 2026
Multiple vulnerabilities were identified in Jenkins. A
remote attacker could exploit some of these vulnerabilities to trigger
cross-site scripting, elevation of privilege, security restriction bypass,
sensitive information disclosure, remote code execution and data manipulation
on the targeted system.
Impact
System / Technologies affected
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
Source
Related Link
Mozilla 產品多個漏洞
發佈日期: 2026年10月28日
於 Mozilla 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發權限提升、繞過保安限制、敏感資料洩露、資料篡改及彷冒。
影響
受影響之系統或技術
以下版本之前的版本﹕
解決方案
在安裝軟體之前，請先瀏覽供應商之官方網站，以獲得更多詳細資料。
更新至版本:
漏洞識別碼
資料來源
相關連結
Mozilla Products Multiple Vulnerabilities
Release Date: 28 Oct 2026
Multiple vulnerabilities were identified in Mozilla
Products. A remote attacker could exploit some of these vulnerabilities to
trigger elevation of privilege, security restriction bypass, sensitive
information disclosure, data manipulation and spoofing on the targeted system.
Impact
System / Technologies affected
Versions prior to:
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
Source
Related Link
