References https://www.twcert.org.tw/tw/cp-132-10199-9c5c6-1.html https://cnc.nptu.edu.tw/p/406-1007-184965,r1042.php?Lang=zh-tw https://www.twcert.org.tw/newepaper/cp-151-10199-9c5c6-3.html https://www.sentinelone.com/vulnerability-database/cve-2025-6561/ https://securityonline.info/cve-2025-6561-cvss-9-8-hunt-electronic-dvr-vulnerability-exposes-admin-credentials-in-plaintext/ https://www.twcert.org.tw/tw/lp-132-1-6-20.html https://isms.ccu.edu.tw/p/404-1044-76477.php?Lang=zh-tw https://github.com/advisories/GHSA-7mcc-3f83-xx54
Related VulnerabilitiesPoCserverless-framework-config-exposure: Serverless Framework - Configuration ExposurePoCterraformrc-credentials-exposure: Terraform CLI Configuration - Credentials ExposurePoCterraform-tfstate-exposure: Terraform State - File ExposurePoCCVE-2025-68273: Signal K Server <= 2.18.0 - Information DisclosurePoCCVE-2026-25703: NeuVector - Information DisclosurePoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data AccessPoCmcp-streamable-http-exposure: MCP Streamable HTTP Server - Unauthenticated Initialize融易網路|GPM LIGHT - Sensitive Data ExposurePoCCVE-2026-6639: AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data ExposurePoCpowerdns-monitor-exposure: PowerDNS Authoritative Server Monitor - Unauthenticated ExposurePoCqdrant-telemetry-exposure: Qdrant - Telemetry ExposurePoCCVE-2026-13153: Essential Blocks < 6.4.0 - Information DisclosurePoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API Exposure