References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f https://nvd.nist.gov/vuln/detail/CVE-2024-20389 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8 https://github.com/advisories/GHSA-3vm4-w2q4-fjv6 https://github.com/advisories/GHSA-xfg4-45f5-2g88
Related VulnerabilitiesPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File UploadCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload金蝶EAS /ormrpc/services/BSHService 代码执行漏洞广联达OA /Mail/Services/EmailAccountOrgUserService.asmx/GetUserEmailByOrgEmails XML 外部实体注入漏洞UniFi Network Application /guest/s/default/login 目录遍历漏洞(CVE-2026-22557)PoCCVE-2026-22557: UniFi Network Application - Path Traversal广联达OA /GTP/IM/Services/Group/Broadcast/MsgBroadcastContent.aspx SQL 注入漏洞宏景eHR /services/SynToADService XML 外部实体注入漏洞Palo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞(CVE-2026-0257)Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞(CVE-2025-0107)宏景 eHR /services/HrChangeInfoService XML 外部实体注入漏洞