References https://www.twcert.org.tw/tw/cp-132-10167-39c6d-1.html https://lic.nuk.edu.tw/p/406-1012-89134,r73.php?Lang=zh-tw https://www.cvedetails.com/cve/CVE-2025-5893/ https://www.openinfosec.com/zh/shareArticle/content/1121 https://www.twcert.org.tw/tw/lp-132-1-6-20.html https://net.nthu.edu.tw/netsys/en:mailing:announcement:20250611_01?do=export_pdf
Related VulnerabilitiesPoCserverless-framework-config-exposure: Serverless Framework - Configuration ExposurePoCterraformrc-credentials-exposure: Terraform CLI Configuration - Credentials ExposurePoCterraform-tfstate-exposure: Terraform State - File ExposurePoCCVE-2025-68273: Signal K Server <= 2.18.0 - Information DisclosurePoCCVE-2026-25703: NeuVector - Information DisclosurePoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data AccessPoCmcp-streamable-http-exposure: MCP Streamable HTTP Server - Unauthenticated Initialize融易網路|GPM LIGHT - Sensitive Data ExposurePoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data ExposurePoCpowerdns-monitor-exposure: PowerDNS Authoritative Server Monitor - Unauthenticated ExposurePoCqdrant-telemetry-exposure: Qdrant - Telemetry ExposurePoCCVE-2026-13153: Essential Blocks < 6.4.0 - Information DisclosurePoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API Exposure