References https://www.ddpoc.com/DVB-2023-5646.html https://deded.de/archives/5e2cea78-58d7-40b6-b4e7-088314f97397 https://cn-sec.com/archives/2248538.html https://github.com/qi4L/yongyouScan-go https://cn-sec.com/archives/tag/iufo/page/2
Related VulnerabilitiesPoCCVE-2026-21589: Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File ReadPoCCVE-2026-29058: WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command InjectionPoC用友NC /ebvp/infopub/showcontent SQL 注入漏洞关于U9 cloud存在命令执行漏洞的安全通告关于U9 cloud存在接口反序列化漏洞的安全通告PoCCVE-2026-58467: Cockpit CMS <= 2.14.0 - Path Traversal / Local File Inclusion关于NC系统的文件控制台SQL注入漏洞的安全通告PoCCVE-2026-9103: Langflow OSS - Superuser Token Issuance金蝶eascloud管理控制端任意文件上传PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication BypassPoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User ImpersonationPoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCEPoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function Invocation