References https://www.twcert.org.tw/tw/cp-132-6569-9fcf4-1.html https://www.twcert.org.tw/en/cp-139-6577-cac4c-2.html https://www.cve.org/CVERecord?id=CVE-2022-39032 https://access.redhat.com/security/cve/cve-2022-39032 https://www.twcert.org.tw/tw/cp-132-6569-9fcf4-1.html
Related VulnerabilitiesPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞PoCCVE-2026-7467: Read More & Accordion <= 3.5.7 - Authenticated Privilege EscalationPoCCVE-2025-14998: Branda WordPress plugin - Privilege EscalationPoCCVE-2025-15403: RegistrationMagic <= 6.0.7.1 - Privilege EscalationPoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege EscalationPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege EscalationPoCCVE-2026-17594: Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format MismatchPoCCVE-2026-57219: RabbitMQ Management - OAuth 2 Client Secret DisclosurePoCCVE-2024-57726: SimpleHelp <= 5.5.7 - Privilege EscalationPoCtp-link-wr840n-auth-bypass: TP-LINK WR840N v6 up to 0.9.1 4.16 - Improper AuthenticationPoCCVE-2026-27542: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation