References https://www.twcert.org.tw/tw/cp-132-6743-0a2c4-1.html https://net.nthu.edu.tw/netsys/mailing:announcement:20221130_01 https://www.cc.ntu.edu.tw/chinese/cert/cert20221208.asp https://www.twcert.org.tw/newepaper/lp-151-3-23-20.html https://app.opencve.io/cve/?vendor=raidenmaild https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html https://www.twcert.org.tw/en/cp-139-6745-7d127-2.html https://www.tcrc.edu.tw/new/new-list/maild-mail-server-cve-2022-41675-cve-2022-41676-1130
Related Vulnerabilities畅捷通T+ERP系统SelectBackupFileOnServer接口处存在目录遍历漏洞PoCserverless-framework-config-exposure: Serverless Framework - Configuration ExposurePoCCVE-2025-68273: Signal K Server <= 2.18.0 - Information DisclosurePoCCVE-2026-61560: GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport AccessPoCmcp-streamable-http-exposure: MCP Streamable HTTP Server - Unauthenticated InitializePoCpowerdns-monitor-exposure: PowerDNS Authoritative Server Monitor - Unauthenticated ExposurePoCCVE-2026-55549: Yamcs <=5.8.6 - Cross-Site ScriptingCuteHttpFileServer/chfs存在未授权任意文件上传PoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site ScriptingPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting北京亿赛通科技发展有限责任公司电子文档安全管理系统CDGServer3-client存在前台sql漏洞