References https://www.twcert.org.tw/tw/cp-132-8045-a2804-1.html https://tp2rc.tanet.edu.tw/node/914 https://www.twcert.org.tw/newepaper/cp-151-8045-a2804-3.html https://net.nthu.edu.tw/netsys/mailing:announcement:20241007_01 https://www.twcert.org.tw/en/cp-139-8046-057c2-2.html https://www.cve.org/CVERecord?id=CVE-2024-8448 https://security.glexia.com/cves/CVE-2024-8448
Related VulnerabilitiesPoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication BypassPoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCEPoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA BypassPoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_codePoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code ExecutionPoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code ExecutionPoCCVE-2026-41679: Paperclip - Remote Code ExecutionPoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code ExecutionPoCCVE-2026-58123: Hermes WebUI < 0.51.788 - Remote Code ExecutionPoCCVE-2026-82222: GiveWP <= 4.16.7.1 - Remote Code ExecutionPoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code ExecutionPoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - ExposurePoCnuget-config-exposure: NuGet.config Package Source Credentials - Exposure