References https://www.twcert.org.tw/tw/cp-132-7022-2cbe0-1.html https://www.ntrc.edu.tw/announce/an20230411-2.html https://www.cvedetails.com/cve/CVE-2023-22901/ https://www.twcert.org.tw/tw/cp-132-7911-0962e-1.html https://github.com/advisories/GHSA-2jq7-x2v9-98wx https://net.nthu.edu.tw/netsys/mailing:announcement:20230407_02 https://oits.pu.edu.tw/p/406-1002-41194,r11.php?Lang=zh-tw https://www.changingtec.com/motp.html https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/HkXPTjgD2 https://www.twcert.org.tw/newepaper/cp-151-7022-2cbe0-3.html
Related VulnerabilitiesPoCCVE-2026-58467: Cockpit CMS <= 2.14.0 - Path Traversal / Local File InclusionPoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path TraversalPoCCVE-2026-44177: Kirby CMS 5.3.0-5.4.0 - Path TraversalPoCCVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path TraversalPoCCVE-2026-54917: SeaweedFS <= 4.29 - Path Traversal File WritePoCCVE-2026-25895: FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File WritePoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCEPoCnodogsplash-lfi: Nodogsplash - Directory TraversalPoCCVE-2025-71324: Flowise - Path TraversalPoCCVE-2026-34908: UniFi OS - Authentication Bypass via Path Traversal (..%2f)PoCCVE-2026-53519: Nezha Dashboard < 2.0.13 - Path TraversalPoCCVE-2024-56511: DataEase < 2.10.4 - Authentication Bypass via Whitelist Path TraversalPoCCVE-2025-71334: Flowise - Path Traversal