References https://www.twcert.org.tw/en/cp-139-6742-0866b-2.html https://nvd.nist.gov/vuln/detail/CVE-2022-32967 https://www.cvedetails.com/cve/CVE-2022-32967/ https://www.twcert.org.tw/tw/cp-132-6740-ba9bd-1.html https://vuldb.com/vuln/214501 https://github.com/advisories/GHSA-49jx-mfcc-vmg8 https://feedly.com/cve/CVE-2022-32967
Related VulnerabilitiesPoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication BypassPoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCEPoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA BypassPoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - ExposurePoCnuget-config-exposure: NuGet.config Package Source Credentials - ExposurePoCpypirc-credentials-exposure: Python .pypirc Credentials - ExposurePoCCVE-2026-18963: Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials BypassPoCCVE-2026-56265: Crawl4AI < 0.8.7 - Hardcoded JWT Signing Key Authentication BypassPoCCVE-2026-44825: Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials盛源|DMS+ (非行動端) - Use of Hard-coded Credentials博格資訊管理顧問|ERP App - Use of Hard-coded CredentialsPoCCVE-2020-10532: WatchGuard Fireware AD Helper Component - Credentials DisclosurePoCfrappe-default-login: Frappe Framework - Default Login Credentials