Related VulnerabilitiesZKTeco-百傲瑞达安防管理系统平台 /authLicenseAction!getLicenseInfo.do 代码执行漏洞QAnything /api/local_doc_qa/upload_files 文件上传漏洞(CVE-2026-88533)Netbox-Docker /api/status/ 默认口令漏洞(CVE-2023-27573)PoCCVE-2026-89013: Dolibarr < 24.0.0 - Authorization Bypass via hashp ParameterPoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access致远互联分析云 DownloadFile 接口存在任意文件读取漏洞PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication BypassPoCCVE-2025-57231: Docmost 0.2.1-0.21.0 - Arbitrary File ReadPoCCVE-2026-26265: Discourse - Private User Field Disclosure via Directory Items IDOR上海小羚羊软件股份有限公司小羚羊ERP系统downloadView存在任意文件读取漏洞PoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site Scripting仁和兴业(深圳)软件有限公司仁和云ERP attachmentdownloadAttachment 接口存在任意文件读取漏洞美麗島安全科技|4MOSAn GCB Doctor - OS Command Injection