References https://www.twcert.org.tw/tw/cp-132-10864-944b1-1.html https://www.twcert.org.tw/newepaper/cp-151-10864-944b1-3.html https://nvd.nist.gov/vuln/detail/CVE-2026-6947 https://stack.watch/vuln/CVE-2026-6947/ https://github.com/advisories/GHSA-j7j4-xj8f-m78g https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2026-6947 https://www.tenable.com/cve/CVE-2026-6947 https://www.dlink.com/tw/zh/products/dwm-222w-4g-lte-ax300-wifi-6-usb-adapter https://vuldb.com/cve/CVE-2026-6947 https://www.sentinelone.com/vulnerability-database/cve-2026-6947/
Related VulnerabilitiesPoCCVE-2026-0692: BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization BypassPoCCVE-2026-49468: LiteLLM Proxy < 1.84.0 - Host Header Authentication BypassPoCCVE-2026-56681: 9router <=0.5.4 - Authentication BypassPoCCVE-2026-89013: Dolibarr < 24.0.0 - Authorization Bypass via hashp ParameterPoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC SecretPoCCVE-2026-42018: JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth BypassPoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication BypassPoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User ImpersonationPoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCEPoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA BypassPoCCVE-2026-0650: OpenFlagr <= 1.1.18 - Authentication BypassPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization BypassPoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()