References https://www.twcert.org.tw/newepaper/cp-151-6641-55796-3.html https://www.twcert.org.tw/en/cp-139-6651-b6cb7-2.html https://cve.imfht.com/detail/CVE-2022-39026 https://cve.imfht.com/detail/CVE-2022-39027 https://www.twcert.org.tw/tw/cp-132-6642-bf567-1.html
Related VulnerabilitiesHepta Platforms｜Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSS金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞PoCdzzoffice-installer: DzzOffice - Installer Page ExposurePoCwp-livechat-stored-xss: WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS上海必智科技有限公司律师E通userID和officeID参数存在SQL注入漏洞友訊科技｜DWM-222W Wi-Fi 6 USB 行動網路卡 - Brute-Force Protection Bypass泛微e-office /iWebOffice/Signature/SignatureDel.php SQL 注入漏洞用友政务财务系统 /billdesigner/office/downloadTemplate 文件读取漏洞万户 ezOFFICE /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../platform/bpm/work_flow/operate/wf_relation.jsp SQL 注入漏洞上海必智科技有限公司律E通emp_office_id参数存在SQL注入漏洞致远 OA /seeyon/officeservlet 信息泄露漏洞PoCCVE-2026-25512: Group-Office < 26.0.5 - Remote Code Execution