References https://community.acer.com/en/kb/articles/19161-listcheck-exe-local-privilege-escalation-vulnerability https://ti.withsecure.com/en/extensions/WITH-ZD-2025-0007 https://github.com/advisories/GHSA-fqv9-v548-xmqm https://www.twcert.org.tw/en/cp-139-10581-16346-2.html https://nvd.nist.gov/vuln/detail/CVE-2025-14305 https://cert.kenet.or.ke/cve-2025-14305-acerlistcheckexe-local-privilege-escalation https://www.twcert.org.tw/tw/cp-132-10580-01ad5-1.html https://app.opencve.io/cve/CVE-2025-14305
Related VulnerabilitiesPoCCVE-2026-29962: HSC MailInspector - Local File InclusionPoCCVE-2026-85200: GEO my WP <=4.5.5.3 - Unauthenticated Local File InclusionPoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File DisclosurePoCCVE-2026-7467: Read More & Accordion <= 3.5.7 - Authenticated Privilege EscalationPoCCVE-2025-14998: Branda WordPress plugin - Privilege EscalationPoCCVE-2025-15403: RegistrationMagic <= 6.0.7.1 - Privilege EscalationPoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege EscalationPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege EscalationPoCCVE-2026-17594: Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format MismatchPoCCVE-2024-57726: SimpleHelp <= 5.5.7 - Privilege EscalationPoCCVE-2026-26217: Crawl4AI < 0.8.0 - Local File InclusionPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File Disclosure