References https://www.twcert.org.tw/tw/cp-132-10057-58c05-1.html https://www.hgiga.com/patch.html https://nvd.nist.gov/vuln/detail/CVE-2025-3364 https://www.twcert.org.tw/newepaper/cp-151-10057-58c05-3.html
Related VulnerabilitiesPoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCEPoCCVE-2026-34156: NocoBase - VM Sandbox Escape to Remote Code ExecutionPoCCVE-2024-4040: CrushFTP VFS - Sandbox Escape LFRPoCCVE-2022-0543: Redis Sandbox Escape - Remote Code ExecutionPoCCVE-2025-46818: Redis Lua Sandbox < 8.2.2 - Cross-User EscapeLibYAML Scanner yaml_parser_scan_uri_escapes堆溢出漏洞HGiga PowerStation - Information LeakageHGiga PowerStation - Command Injection