CVE-2026-7490

脆弱性の種類

CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

影響を受ける製品

• sun.net ehrd_cpas
• sun.net ehrd_ctms

参考情報

• https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html
• https://www.twcert.org.tw/tw/cp-132-10894-1ac1f-1.html