保安警報 (A26-11-19): Ivanti 產品多個漏洞


 

發布日期: 2026年 11月 11日

描述:

Ivanti 發布了安全公告，以應對 Ivanti 產品的多個漏洞。有關漏洞的詳情請參考以下網址:
https://forums.ivanti.com/s/article/kA1UL000000AO5t0AG
https://forums.ivanti.com/s/article/kA1UL000000ANpl0AG
https://forums.ivanti.com/s/article/kA1UL000000ANJV0A4
https://forums.ivanti.com/s/article/kA1UL000000AO4H0AW
https://forums.ivanti.com/s/article/kA1UL000000AMvJ0AW

 

受影響的系統:

  • Ivanti Cloud Services Application (CSA) 5.0.8 之前的版本
  • Ivanti Endpoint Manager (EPM) 2024 之前的版本
  • Ivanti Endpoint Manager Mobile (EPMM) 12.9.0.2 之前的版本
  • Ivanti Endpoint Manager Mobile (EPMM) 12.10.0.0 之前的版本
  • Ivanti Sentry 10.7.3 之前的版本
  • Ivanti Sentry 10.8.2 之前的版本
  • Ivanti User Workspace Manager (UWM) 2026.2 之前的版本

 

影響:

成功利用漏洞可以導致受影響的系統發生遠端執行程式碼、服務被拒絕、權限提升、泄漏資訊或篡改。

 

建議:

現已有適用於受影響系統的修補程式。受影響系統的系統管理員應遵從供應商的建議，立即採取行動以降低風險。

 

進一步資訊:

  • https://forums.ivanti.com/s/article/kA1UL000000AMvJ0AW
  • https://forums.ivanti.com/s/article/kA1UL000000ANJV0A4
  • https://forums.ivanti.com/s/article/kA1UL000000ANpl0AG
  • https://forums.ivanti.com/s/article/kA1UL000000AO4H0AW
  • https://forums.ivanti.com/s/article/kA1UL000000AO5t0AG
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18128
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-83528
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105425 (to CVE-2026-105427)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105669
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105813
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-107404 (to CVE-2026-107405)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-121653
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-121683
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-123179
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-123181


標籤 : Ivanti , Ivanti CSA , Ivanti EPM , Ivanti EPMM , Ivanti Sentry , Ivanti UWM
標籤