References https://www.twcert.org.tw/tw/cp-132-7599-461d5-1.html https://avd.aliyun.com/detail?id=AVD-2023-48381 https://www.twcert.org.tw/tw/cp-132-7600-dd072-1.html https://www.twcert.org.tw/tw/cp-132-6644-d7aac-1.html https://softnext-inc.com/news_main.html?pg=7&tag=t2&nid=1107 https://security-tracker.debian.org/tracker/CVE-2023-48382 https://www.twcert.org.tw/newepaper/cp-151-7599-461d5-3.html https://github.com/advisories/GHSA-cf7g-v496-72mp https://www.cve.org/CVERecord?id=CVE-2022-40742
Related VulnerabilitiesPoCCVE-2026-29962: HSC MailInspector - Local File InclusionPoCCVE-2026-85200: GEO my WP <=4.5.5.3 - Unauthenticated Local File InclusionPoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File DisclosurePoCCVE-2026-26217: Crawl4AI < 0.8.0 - Local File InclusionPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information DisclosurePoCCVE-2025-2505: WordPress Age Gate <= 3.5.3 - Unauthenticated Local File InclusionPoCCVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site ScriptingPoCCVE-2026-34036: Dolibarr <=22.0.4 - Local File InclusionPoCjoomla-com-fabrik-lfi: Joomla! com_fabrik 3.9.11 - Local File InclusionPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionRancher /v3-public/localProviders/local 默认口令漏洞PoCCVE-2024-10763: WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion