Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026031609035353 | Publication Time | 2026/03/16 09:33 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026/03/16 09:33 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】WeBridge Information | Single Sign-On and Electronic Directory Service System – Local File Inclusion |
|||
| [Content] Forwarded from TWCERTCC-200-202603-00000011 【WeBridge Information | Single Sign-On and Electronic Directory Service System – Local File Inclusion】(CVE-2026-3826, CVSS: 9.8) An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary code on the server side. (Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform]
Single Sign-On and Electronic Directory Service System versions prior to IFTOP_P4_181 (excluding IFTOP_P4_181) |
|||
| [Recommended Actions]
Update to version IFTOP_P4_181 (inclusive) or later. |
|||
| [Reference] https://www.twcert.org.tw/tw/cp-132-10755-94136-1.html |
|||