References https://www.twcert.org.tw/tw/cp-132-7101-f88db-1.html https://www.twcert.org.tw/tw/lp-132-1-20-20.html https://www.wddgroup.com/ https://cio-partners.blogspot.com/search/label/%E5%A8%81%E5%BE%B7%E7%B6%B2%E9%A0%81%E8%A8%AD%E8%A8%88%20FANTSY
Related VulnerabilitiesPoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header SpoofingPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default Login畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞金和OA /c6/JHSoft.Web.CostControl/BudgetExecution/VouchUpdate.aspx SQL 注入漏洞天问物业ERP系统 /HM/M_Main/HC/DataGetControl.aspx SQL 注入漏洞技嘉科技｜Gigabyte Control Center - Improper Access ControlPoCopcache-control-panel: Opcache control Panel - Unauthenticated AccessJeeWMS cgReportController.do wm_wendubb SQL 注入漏洞Electrolink FM/DAB/TV Transmitter /controlloLogin.js 信息泄露漏洞（CVE-2025-28228）PoCCVE-2026-32230: Uptime-Kuma < v1.23.0 - Improper Access Control基點資訊｜CelloOS - Improper Access ControlJeeWMS /rest/../iconController.do 文件上传漏洞
