References https://www.twcert.org.tw/tw/cp-132-10896-e3240-1.html https://www.tssecurity.com.tw/en/news/%E6%97%A5%E8%BA%8D%E7%A7%91%E6%8A%80app%E5%A5%BD%E6%A0%A1%E9%80%9A-insecure-direct-object-reference-1777985744554 https://www.twcert.org.tw/newepaper/cp-151-10896-e3240-3.html https://www.tssecurity.com.tw/news/%E6%97%A5%E8%BA%8D%E7%A7%91%E6%8A%80app%E5%A5%BD%E6%A0%A1%E9%80%9A-insecure-direct-object-reference-1777985744554 https://cc.tcu.edu.tw/?page_id=5347 https://inc.ntub.edu.tw/p/412-1011-4012.php?Lang=zh-tw https://www.twcert.org.tw/tw/lp-132-1-1-60.html https://www.appsecure.security/vulnerability-database/cve-2026-7491/ https://basefortify.eu/cve_reports/2026/05/cve-2026-7491.html
Related VulnerabilitiesPoCCVE-2026-26265: Discourse - Private User Field Disclosure via Directory Items IDORPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectWordPress Directory Kit 插件敏感信息泄露漏洞(CVE-2025-13920)PoCCVE-2025-53887: Directus < 11.9.0 - Version DisclosurePoCCVE-2026-64849: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect BypassPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCbentoml-open-redirect: BentoML v1.3.9 - Open RedirectPoCnodogsplash-lfi: Nodogsplash - Directory TraversalPoCuna-cms-rce: UNA CMS <= 14.0.0-RC4 - PHP Object Injection英華達|全家寶 Cloud - Insecure Direct Object ReferencePoCCVE-2025-55746: Directus - Unauthenticated File ModificationPoCCVE-2026-3296: Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection