References https://www.twcert.org.tw/tw/cp-132-10658-c5a07-1.html https://www.tssecurity.com.tw/blog/categories/tvn%E6%BC%8F%E6%B4%9E%E5%85%AC%E5%91%8A https://www.digit-secure.com/%E6%BC%8F%E6%B4%9E%E5%85%AC%E5%91%8A https://nvd.nist.gov/vuln/detail/CVE-2026-1514 https://www.sentinelone.com/vulnerability-database/cve-2026-1514/ https://tp2rc.tanet.edu.tw/node/1127 https://infosec.fcu.edu.tw/vulnerability/cve-2025-8853/ http://www.2100t.com.tw/web/
Related VulnerabilitiesPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization BypassPoCCVE-2026-53595: FreeScout < 1.8.224 - Invite Hash Authorization BypassPoCCVE-2025-14047: User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion二一零零科技|公文管理系統 - Arbitrary File UploadPoCCVE-2026-34976: Dgraph <=v25.3.0 - Admin Mutation Missing AuthorizationPoCCVE-2026-1830: Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File UploadPoCCVE-2026-22683: Windmill < 1.603.3 - Operator Authorization BypassPoCCVE-2026-3335: Canto <= 3.1.1 - Missing Authorization to Unauthenticated File UploadPoCCVE-2026-42569: phpVMS < 7.0.6 - Legacy Importer Authorization BypassPoCCVE-2025-68043: LottieFiles WordPress Plugin <= 3.0.0 - Missing AuthorizationPoCCVE-2024-30464: WPZOOM Social Icons Widget <= 4.2.15 - Missing AuthorizationPoCCVE-2025-11580: PowerJob List - Authorization Bypass