References https://www.huaweicloud.com/notice/20260513154913078.html https://www.cnvd.org.cn/flaw/show/CNVD-2026-12910 https://www.hkcert.org/tc/security-bulletin/microsoft-office-security-restriction-bypass-vulnerability_20260127 https://www.nics.nat.gov.tw/core_business/information-security_information_sharing/Vulnerability_Alert_Announcements/08fe05d1-8a1b-4e2d-b655-96c3a6b4d4d4/ https://cve.imfht.com/detail/CVE-2026-20949 https://www.secrss.com/articles/87360 https://www.twcert.org.tw/tw/cp-169-10744-8e4f3-1.html https://cve.imfht.com/detail/CVE-2025-27744 https://www.cve.org/CVERecord?id=CVE-2026-42832 https://nvd.nist.gov/vuln/detail/cve-2026-20949 https://github.com/advisories/GHSA-4qv5-2qmr-5xhv https://www.sentinelone.com/vulnerability-database/cve-2026-41102/
Related VulnerabilitiesPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEMicrosoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞(CVE-2025-53770)Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞(CVE-2026-50522)Microsoft SharePoint Server JWT 权限绕过漏洞(CVE-2026-55040)PoCdzzoffice-installer: DzzOffice - Installer Page Exposure上海必智科技有限公司律师E通userID和officeID参数存在SQL注入漏洞泛微e-office /iWebOffice/Signature/SignatureDel.php SQL 注入漏洞用友政务财务系统 /billdesigner/office/downloadTemplate 文件读取漏洞万户 ezOFFICE /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../platform/bpm/work_flow/operate/wf_relation.jsp SQL 注入漏洞上海必智科技有限公司律E通emp_office_id参数存在SQL注入漏洞致远 OA /seeyon/officeservlet 信息泄露漏洞PoCCVE-2026-25512: Group-Office < 26.0.5 - Remote Code ExecutionPoCCVE-2021-28480: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)