References https://www.twcert.org.tw/tw/cp-132-10570-72e31-1.html https://www.twcert.org.tw/newepaper/cp-151-10570-72e31-3.html https://www.cvedetails.com/cve/CVE-2025-14712/ https://www.twcert.org.tw/tw/lp-132-1-3-20.html https://www.openinfosec.com/zh/shareArticle/content/1639 https://cve.imfht.com/detail/CVE-2025-14712 https://www.sdc.org.tw/111-114/product/%E5%AD%B8%E7%94%9F%E5%AD%B8%E7%BF%92%E8%A8%BA%E6%96%B7%E8%BC%94%E5%B0%8E%E7%B3%BB%E7%B5%B1/ https://www.jhenggao.com/
Related VulnerabilitiesPoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API ExposurePoClangflow-api-exposure: Langflow - Unauthenticated API ExposurePoCCVE-2026-42221: Nginx UI <= 2.3.7 - Unauthenticated Installer ExposurePoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API AccessPoCvictoriametrics-vmagent-api-exposure: VictoriaMetrics vmagent - Unauthenticated Targets ExposurePoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - ExposurePoCnuget-config-exposure: NuGet.config Package Source Credentials - ExposurePoCpypirc-credentials-exposure: Python .pypirc Credentials - ExposurePoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information DisclosurePoCfastly-debug-headers: Fastly CDN Debug Headers ExposurePoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information DisclosurePoCCVE-2026-27796: Homarr < 1.54.0 - Information DisclosurePoCclaude-code-agents: Claude Code Subagent Configuration - Exposure