References https://www.twcert.org.tw/tw/cp-132-10319-adc18-1.html https://cc.ncku.edu.tw/p/404-1213-287543.php?Lang=zh-tw https://lic.nuk.edu.tw/p/406-1012-90229,r73.php?Lang=zh-tw https://infosec.fcu.edu.tw/vulnerability/cve-2025-8853/ https://www.cvedetails.com/cve/CVE-2025-8853/ https://www.nchu.edu.tw/news-detail.php?id=60150 https://net.nutc.edu.tw/p/403-1116-11-1.php?Lang=zh-tw https://www.twcert.org.tw/tw/cp-132-8339-570fa-1.html
Related VulnerabilitiesPoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication BypassPoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User ImpersonationPoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCEPoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA BypassPoCCVE-2026-0650: OpenFlagr <= 1.1.18 - Authentication BypassPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization BypassPoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()PoCCVE-2026-30849: MantisBT < 2.28.1 - SOAP API Authentication BypassPoCCVE-2026-41452: Krayin CRM < 2.2.1 - Installer Authentication BypassPoCCVE-2026-48558: SimpleHelp <=5.5.15 - OIDC JWT Authentication BypassPoCCVE-2026-53595: FreeScout < 1.8.224 - Invite Hash Authorization BypassPoCCVE-2026-60105: Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist BypassPoCCVE-2026-62382: PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership Bypass