Related VulnerabilitiesPoCCVE-2026-26265: Discourse - Private User Field Disclosure via Directory Items IDORPoCCVE-2026-42461: Arcane < 1.18.0 - Unauthenticated Template and Env DisclosureArcane /api/templates 未授权访问漏洞(CVE-2026-42461)泛微-Ecology10 getFieldValueFun SQL注入漏洞用友 GRP-U8Cloud /jmreport/queryFieldBySql Freemarker 命令执行漏洞PoCCVE-2026-28496: FOSSBilling - Server-Side Template Injection智邦国际ERP /SYSN/json/pcclient/GetAllPrintTemplate.ashx SQL 注入漏洞索贝 template/api/styleList/3 未授权访问漏洞孚盟云 CRM /Ajax/upload.ashx DownLoadFieldAttch SQL 注入漏洞天地伟业 Easy7 /Easy7/rest/preSetTemplate/getRecByTemplateId SQL 注入漏洞用友政务财务系统 /billdesigner/office/downloadTemplate 文件读取漏洞PoCCVE-2021-23337: Lodash Template - Server-Side Template Injection (RCE)PoCCVE-2026-4257: WordPress Contact Form by Supsystic - Server-Side Template Injection