Related VulnerabilitiesPoCCVE-2026-8236: Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata DisclosurePoCCVE-2026-67208: Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database ConsolePoCCVE-2024-56511: DataEase < 2.10.4 - Authentication Bypass via Whitelist Path TraversalPoCCVE-2026-8385: WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data DisclosureDatart /api/v1/users/login 默认口令漏洞用友GRP-U8Cloud /jmreport/loadTableData SQL 注入漏洞天问物业ERP系统 /HM/M_Main/HC/DataGetControl.aspx SQL 注入漏洞JeecgBoot 积木报表 /jmreport/getDataSourceByPage 信息泄露漏洞关于NC Cloud及YonBIP高级版系统的datacollectservlet接口漏洞安全通告PoCCVE-2026-1890: LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data WritePoCCVE-2026-56782: Gorse < 0.5.10 - Unauthenticated Database Dump广联达OA /GB/LK/Document/DataExchange/DataExchange.ashx XML 外部实体注入漏洞XWiki /xwiki/rest/liveData/sources/liveTable/entries SQL 注入漏洞(CVE-2025-32429)