References https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/854aa862-f5be-46b5-b41a-bd723e118f0d/ https://cnc.nptu.edu.tw/p/406-1007-194823,r1042.php?Lang=zh-tw https://cc.ncku.edu.tw/p/404-1213-296416.php?Lang=zh-tw https://www.twcert.org.tw/tw/cp-132-10129-18ea3-1.html https://www.tcrc.edu.tw/new/new-list/threatsonar-anti-ransomware-privilege-escalation https://da.taichung.gov.tw/ch/%E8%B3%87%E8%A8%8A%E6%A5%AD%E5%8B%99/%E8%B3%87%E8%A8%8A%E5%AE%89%E5%85%A8%E8%88%87%E5%9F%BA%E7%A4%8E%E5%BB%BA%E8%A8%AD/%E8%B3%87%E5%AE%89%E5%AE%A3%E5%B0%8E%E5%B0%88%E5%8D%80/2348144/2689140 https://hdrc.ndhu.edu.tw/p/406-1185-257237,r11.php?Lang=zh-tw https://www.twcert.org.tw/tw/cp-132-10854-03015-1.html https://nvd.nist.gov/vuln/detail/CVE-2026-5967 https://github.com/advisories/GHSA-49hc-46g6-4c47 https://teamt5.org/en/posts/vulnerability-notice-20260420-threat-sonar-anti-ransomware-versions-4-0-0-earlier/ https://www.sentinelone.com/vulnerability-database/cve-2026-5967/
Related VulnerabilitiesPoCCVE-2026-7467: Read More & Accordion <= 3.5.7 - Authenticated Privilege EscalationPoCCVE-2025-14998: Branda WordPress plugin - Privilege EscalationPoCCVE-2025-15403: RegistrationMagic <= 6.0.7.1 - Privilege EscalationPoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege EscalationPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege EscalationPoCCVE-2026-17594: Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format MismatchPoCCVE-2024-57726: SimpleHelp <= 5.5.7 - Privilege EscalationPoCCVE-2026-27542: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation杜浦數位安全|ThreatSonar Anti-Ransomware - 存在2個漏洞PoCCVE-2026-1492: WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation九佳易管理系统 PrivilegedCodeDestroy SQL注入漏洞九佳易 Interface/licx/PrivilegedCodeDestroy.asmx/UpdatePrivilegedState SQL 注入漏洞