References https://www.twcert.org.tw/tw/cp-132-7152-d7f5b-1.html https://www.twcert.org.tw/newepaper/cp-151-7152-d7f5b-3.html https://www.cve.org/CVERecord?id=CVE-2023-25780 https://isms.ccu.edu.tw/p/406-1044-41637,r1500.php?Lang=zh-tw https://net.nthu.edu.tw/netsys/mailing:announcement:20230531_03 https://www.twcert.org.tw/en/lp-139-2-20-20.html https://cve.imfht.com/detail/CVE-2023-25780 https://www.status.com.tw/PowerBPM
Related VulnerabilitiesPoCCVE-2026-61560: GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport AccessPoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data AccessPoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access ControlPoCCVE-2026-82456: argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool AccessPoCCVE-2026-59177: ESPHome Device Builder <1.0.10 - Unauthenticated Dashboard AccessPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectPoCCVE-2026-82329: JFrog Artifactory Access Blank Join Key Authentication BypassPoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header SpoofingPoCCVE-2026-86426: LibreNMS <= 26.7.0 - Unauthenticated API AccessPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginPoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API Access大华-智慧园区综合管理平台 updateAccessChannelByVisit SQL注入漏洞畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞