References https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2 https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.10 https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11 https://github.com/j2ekim/YonyouNC_Tip https://nosec.org/m/share/4472.html https://github.com/novysodope/fupo_for_yonyou
Related VulnerabilitiesPoCCVE-2026-0692: BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization BypassPoCCVE-2026-29058: WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command InjectionPoCXboot /xboot/common/swagger/login 服务器端请求伪造漏洞PoCCVE-2025-34033: Blue Angel Software Suite (5V Technologies) - OS Command InjectionPoCCVE-2026-12227: Visual Composer <= 45.16.0 - Unauthenticated LFIPoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access Control全景軟體|CGServiSign - OS Command InjectionPoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL InjectionPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginJoomShaper SP LMS /index.php?option=com_splms&view=cart 文件上传漏洞(CVE-2026-48909)綠色運算|NUMail - OS Command InjectionPoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation