References https://www.twcert.org.tw/tw/cp-132-7504-c6a5e-1.html https://nvd.nist.gov/vuln/detail/CVE-2023-41354 https://www.cvedetails.com/cve/CVE-2023-41354/ https://www.twcert.org.tw/en/cp-139-7519-967ad-2.html https://sara-open.sirp.io/cve/CVE-2023-41354 https://cve.imfht.com/product/NOKIA%20G-040W-Q?lang=en https://www.twcert.org.tw/newepaper/cp-151-7504-c6a5e-3.html https://github.com/advisories/GHSA-4cgw-v6r3-9jcg https://euvd.enisa.europa.eu/vulnerability/CVE-2023-41354
Related VulnerabilitiesPoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API ExposurePoClangflow-api-exposure: Langflow - Unauthenticated API ExposurePoCCVE-2026-42221: Nginx UI <= 2.3.7 - Unauthenticated Installer ExposurePoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API AccessPoCvictoriametrics-vmagent-api-exposure: VictoriaMetrics vmagent - Unauthenticated Targets ExposurePoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - ExposurePoCnuget-config-exposure: NuGet.config Package Source Credentials - ExposurePoCpypirc-credentials-exposure: Python .pypirc Credentials - ExposurePoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information DisclosurePoCfastly-debug-headers: Fastly CDN Debug Headers ExposurePoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information DisclosurePoCCVE-2026-27796: Homarr < 1.54.0 - Information DisclosurePoCclaude-code-agents: Claude Code Subagent Configuration - Exposure