References https://www.nsfocus.net/vulndb/65499 https://avd.aliyun.com/detail?id=AVD-2022-27226 https://cve.imfht.com/detail/CVE-2022-27226 https://nvd.nist.gov/vuln/detail/CVE-2022-27226 https://www.tenable.com/plugins/ot/502257 https://johnjhacking.com/blog/cve-2022-27226/ https://www.exploit-db.com/exploits/50832 https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-27226 https://github.com/advisories/GHSA-52c6-hmcv-vmjj https://www.cvedetails.com/cve/CVE-2022-27226/
Related VulnerabilitiesPoCCVE-2026-19900: LB-LINK Routers - Unauthenticated Command Injection蓝凌EIS智慧协同平台 /Mobile/mobile_define.aspx/Getmobiles SQL 注入漏洞PoCCVE-2025-13339: Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File ReadPoCCVE-2026-10580: Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account TakeoverPoCibm-mfp-default-login: IBM MobileFirst Foundation - Default CredentialsPoC蓝凌EIS /mobileapp/Task/task_view.aspx SQL 注入漏洞PoCBLINK Routers /goform/set_cmd 命令执行漏洞(CVE-2025-1609)BLINK routers /goform/set_hidessid_cfg 命令执行漏洞(CVE-2025-45985)LEAN MES系统 MobileAppLogin.ashx 存在SQL注入漏洞PoC友数聚科技-CPAS审计管理系统V4 /cpasm4/static/..;/mobileUploadPictureController/doDownLoadPicFile 文件读取漏洞Tattile ANPR Mobile 弱口令Ivanti Endpoint Manager Mobile /mifs/c/appstore/fob/3/5/sha256 命令执行漏洞(CVE-2026-1281/CVE-2026-1340)Ivanti Endpoint Manager Mobile 未授权 代码注入漏洞