References https://www.twcert.org.tw/tw/cp-132-8144-2885b-1.html https://cc.nchu.edu.tw/p/404-1000-1427.php?Lang=zh-tw https://net.nthu.edu.tw/netsys/mailing:announcement:20241018_06?do=export_pdf https://www.twcert.org.tw/en/cp-139-8145-15bea-2.html https://lis.mcut.edu.tw/p/16-1013-69395.php?Lang=en https://cc.ncku.edu.tw/var/file/213/1213/img/4803/148956151.pdf https://www.twcert.org.tw/tw/cp-132-8142-cf0d3-1.html
Related VulnerabilitiesPoCCVE-2026-58467: Cockpit CMS <= 2.14.0 - Path Traversal / Local File InclusionPoCCVE-2026-29962: HSC MailInspector - Local File InclusionPoCCVE-2026-85200: GEO my WP <=4.5.5.3 - Unauthenticated Local File InclusionPoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File DisclosurePoCCVE-2026-26217: Crawl4AI < 0.8.0 - Local File InclusionPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information DisclosurePoCCVE-2025-2505: WordPress Age Gate <= 3.5.3 - Unauthenticated Local File InclusionPoCCVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site ScriptingPoCCVE-2026-34036: Dolibarr <=22.0.4 - Local File InclusionPoCjoomla-com-fabrik-lfi: Joomla! com_fabrik 3.9.11 - Local File InclusionPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionRancher /v3-public/localProviders/local 默认口令漏洞