Related VulnerabilitiesPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectPoCCVE-2026-48030: Pheditor 2.0.1-2.0.3 - OS Command InjectionPoCCVE-2026-34036: Dolibarr <=22.0.4 - Local File InclusionPoC方正畅享全媒体采编系统 /newsedit/msg/cc.do 信息泄露漏洞Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞(CVE-2025-0107)Dolibarr /index.php 默认口令漏洞tianti /tianti-module-admin/ueditor/controller.jsp 服务器端请求伪造漏洞Palo Alto Expedition /bin/configurations/parsers/Checkpoint/CHECKPOINT.php SQL 注入漏洞(CVE-2024-9465)PoClimesurvey-open-redirect: LimeSurvey - Open Redirect via editorLinkPoC方正畅享 /newsedit/api/orgUser/addOrUpdateOrg XML 外部实体注入漏洞DoraCMS /api/v1/upload/ueditor 服务器端请求伪造漏洞(CVE-2026-25870)PoC深信服运维安全管理系统 /fort/login/edit_pwd_mall 权限绕过漏洞(CVE-2026-1325)金和OA LeaveTypeEdit.aspx SQL注入漏洞