Skip to content

安全通報：Citrix Hypervisor 漏洞

關鍵威脅警訊：LiteLLM Proxy RCE 弱點鏈

多個弱點（SQLi、SSTI 及指令注入）已被揭露，攻擊者可藉此完全控制受影響之 LiteLLM 實例。

漏洞摘要

建議 ID類型權限需求嚴重程度
GHSA-r75f-5x8p-qvmcSQL 注入 (SQL Injection)未經授權關鍵 (9.3)
GHSA-xqmj-j6mv-4862模板注入 (SSTI)需要驗證高 (High)
GHSA-v4p8-mg3p-g94g指令執行 (Command Execution)需要驗證高 (High)

 

修復建議

受影響版本： v1.81.16 – v1.83.6

建議行動： 務必立即升級至 v1.83.7-stable 或更高版本。

網路獵捕 (runZero 查詢指令)

透過搜尋特定 HTTP 標頭與 HTML 標題來識別暴露的 LiteLLM 實例：

_asset.protocol:http AND protocol:http AND (html.title:=”LiteLLM%” OR last.html.title:=”LiteLLM%”)

關於 runZero
runZero 是一種網路發現和資產庫存解決方案，由 Metasploit 的創建者 HD Moore 於 2018 年創立。 HD 設想了一種現代主動發現解決方案，無需憑證即可找到和識別網路上的所有內容。 作為一名安全研究員和滲透測試人員，他經常採用良性的方式來獲取資訊洩漏並將它們拼湊起來以建立設備配置文件。 最終，這項工作促使他利用應用研究和為安全和滲透測試開發的發現技術來創建 runZero。

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

安全通報：LiteLLM RCE 弱點鏈

關鍵威脅警訊：LiteLLM Proxy RCE 弱點鏈

多個弱點（SQLi、SSTI 及指令注入）已被揭露，攻擊者可藉此完全控制受影響之 LiteLLM 實例。

漏洞摘要

建議 ID類型權限需求嚴重程度
GHSA-r75f-5x8p-qvmcSQL 注入 (SQL Injection)未經授權關鍵 (9.3)
GHSA-xqmj-j6mv-4862模板注入 (SSTI)需要驗證高 (High)
GHSA-v4p8-mg3p-g94g指令執行 (Command Execution)需要驗證高 (High)

 

修復建議

受影響版本： v1.81.16 – v1.83.6

建議行動： 務必立即升級至 v1.83.7-stable 或更高版本。

網路獵捕 (runZero 查詢指令)

透過搜尋特定 HTTP 標頭與 HTML 標題來識別暴露的 LiteLLM 實例：

_asset.protocol:http AND protocol:http AND (html.title:=”LiteLLM%” OR last.html.title:=”LiteLLM%”)

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

OT 安全原則：最終章

 

Principle 5: Boundary Hardening

Your perimeter is your strongest asset against legacy vulnerabilities.

  • Rotate default passwords immediately.
  • Implement phish-resistant MFA.
  • Use context-aware access (Location, OS version, Time).

Principle 6: Impact Limitation

Assume a breach will happen. Design your network to contain it.

  • Segmentation: Isolate functional networks via firewalls.
  • Lateral Movement Defense: Use microsegmentation to block host-to-host pivoting.

Principle 7: Logging & Monitoring

Logs must be actionable, not just stored.

Focus AreaAction
AnomaliesAlert on traffic baselines.
Break-GlassHigh-criticality alerts on emergency account use.
Data FlowsMonitor cross-segment transfers.

Principle 8: Isolation Planning

Develop a “kill switch” strategy that maintains critical functions.

  • Test Site Isolation before an actual emergency occurs.
  • Ensure critical functions operate in “Offline Mode.”

How runZero Helps

Gain total visibility across your OT environment:

  • Discover coverage gaps and bridging devices.
  • Identify edge devices with unauthorized connections.
  • Audit hardware for default configuration risks.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關鍵安全公告：Fortinet FortiClient EMS

執行摘要： FortiClient EMS API 中的存取控制不當，允許未經身份驗證的攻擊者執行任意程式碼。建議立即針對所有受影響資產套用更新。

 

漏洞概況

  • CVE 編號： CVE-2026-35616
  • CVSS 分數： 9.1 (關鍵級別)
  • 影響： 遠端程式碼執行 (RCE)

 

補救措施表

受影響分支必要更新 / 操作
FortiClientEMS 7.4升級至 7.4.7 或更高版本
FortiClientEMS 7.4.5套用熱修補程式 7.4.5.2111
FortiClientEMS 7.4.6套用熱修補程式 7.4.6.2170

 

資產發現 (runZero)

請使用以下服務查詢指令，識別網路中潛在暴露的端點：

_asset.protocol:http AND protocol:http AND favicon.ico.image.mmh3:=-800551065

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

F5 BIG-IP 安全建議公告 – 2026 年 3 月

危急：CVE-2025-53521 已升級為 RCE (CVSS 9.8) – 偵測到活躍攻擊

F5 已確認先前披露的 DoS 漏洞現已演變為 遠端程式碼執行 (RCE) 威脅。所有使用 BIG-IP Access Policy Manager (APM) 的實例必須立即進行修補。

修復建議對照表

受影響版本必備修補版本
17.5.x17.5.1.3 或更高版本
17.1.x17.1.3 或更高版本
16.1.x16.1.6.1 或更高版本
15.1.x15.1.10.8 或更高版本
CISA KEV 狀態： 此漏洞已於 2026 年 3 月 27 日加入已知被利用漏洞目錄。強烈建議聯邦機構與企業立即斷開或修補管理介面。

 

資產識別查詢語句 (runZero)

定位可能受到影響的軟體模組：

vendor:=F5 AND product:=”BIG-IP Access Policy Manager”

定位網路中所有基於 F5 作業系統的設備：

os:=”F5%”

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

×

Hello!

Click one of our contacts below to chat on WhatsApp

Social Chat is free, download and try it now here!

×