References https://www.twcert.org.tw/tw/cp-132-6572-5c2c8-1.html https://www.twcert.org.tw/newepaper/cp-151-6572-5c2c8-3.html https://www.twcert.org.tw/newepaper/lp-151-3-24-20.html https://www.twcert.org.tw/tw/lp-132-1-24-20.html https://cve.imfht.com/product/Smart%20eVision?lang=en https://app.opencve.io/cve/?vendor=lcnet&product=smart_evision
Related VulnerabilitiesPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞Hepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSSPoCCVE-2026-52773: YesWiki Archived Revision - Cross-Site ScriptingApache Kafka UI /smartfilters/testexecutions 代码执行漏洞(CVE-2026-5562)PoCwp-livechat-stored-xss: WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSSPoCCVE-2026-24423: SmarterMail - Remote Code Execution易宝 OA /SmartTradeScan/StockTake/SetScanQty txtBoxNo SQL 注入漏洞PoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch APIPoCCVE-2024-3231: Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site ScriptingPoCCVE-2025-1232: Site Reviews < 7.2.5 - Unauthenticated Stored XSS太友 QSmart Audit 管理系统存在弱口令