References https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html https://www.twcert.org.tw/newepaper/cp-151-7662-41d50-3.html https://www.twcert.org.tw/tw/lp-132-1-16-20.html https://www.twcert.org.tw/tw/cp-132-10064-6346a-1.html https://www.twcert.org.tw/tw/cp-132-7697-ecf10-1.html https://www.intumit.tw/smartrobot_zh/ https://www.twcert.org.tw/tw/cp-132-8069-73393-1.html
Related VulnerabilitiesPoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_codePoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code ExecutionPoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code ExecutionPoCCVE-2026-41679: Paperclip - Remote Code ExecutionPoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code ExecutionPoCCVE-2026-58123: Hermes WebUI < 0.51.788 - Remote Code ExecutionPoCCVE-2026-82222: GiveWP <= 4.16.7.1 - Remote Code ExecutionPoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code ExecutionPoCCVE-2026-40217: LiteLLM < 1.25.0 - Remote Code ExecutionPoCCVE-2026-45695: Kopia Server 0.23.0 - Remote Code ExecutionPoCCVE-2026-61511: vBulletin 6.x - Remote Code ExecutionPoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code ExecutionPoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code Execution