References https://www.twcert.org.tw/tw/cp-132-7024-bdefe-1.html https://www.twcert.org.tw/newepaper/cp-151-7024-bdefe-3.html https://www.aenrich.com.tw/news_events/pr_20230331.asp https://www.ycrc.edu.tw/show_news.php?id=513 https://net.nthu.edu.tw/netsys/mailing:announcement:20230407_01?do=export_pdf https://www.twcert.org.tw/newepaper/lp-151-3-21-20.html https://oits.pu.edu.tw/p/406-1002-41193,r11.php?Lang=zh-tw
Related VulnerabilitiesPoCCVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java DeserializationPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCCVE-2025-26399: SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCEPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEPoCCVE-2024-42323: Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code ExecutionPoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEPoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure DeserializationPoCCVE-2026-33439: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization育碁數位科技|a+HRD - 存在2個漏洞技嘉|Performance Library - Insecure DeserializationPoCCVE-2026-27971: Qwik - Unauthenticated RCE via server$ DeserializationPoCCVE-2025-49533: Adobe Experience Manager Forms - Insecure Deserialization