Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202609-00000008

【CVE-2026-21962】Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in Improper Access Control Vulnerability (CVSS v3.1: 10.0)
【Whether exploited by ransomware: Unknown】Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in contain an Improper Access Control vulnerability, which may allow unauthorized users to obtain permissions to create, delete, or modify critical data, as well as unauthorized access to critical data, and may even result in full access to all data accessible by Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in.

【CVE-2026-60004】Gitea Code Injection Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Gitea contains a Code Injection vulnerability. An attacker with repository write permissions may send a malicious patch to the diffpatch API endpoint to implant an executable Git hook and execute Shell commands as the Gitea service account.

【CVE-2021-23758】Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (CVSS v3.1: 8.1)
【Whether exploited by ransomware: Unknown】Ajax.NET Professional (AjaxPro) contains a Deserialization of Untrusted Data vulnerability, which may allow an attacker to execute remote code by leveraging arbitrary .NET classes. The affected products may have reached End-of-Life (EoL) and/or End-of-Support (EoS). Users are advised to discontinue use of the affected products and/or migrate to supported versions.

【CVE-2015-3246】Red Hat Libuser Race Condition Vulnerability (CVSS v3.1: 5.1)
【Whether exploited by ransomware: Unknown】Red Hat libuser contains a Race Condition vulnerability that allows an authenticated local user to corrupt the /etc/passwd file, potentially resulting in denial of service or privilege escalation.

【CVE-2015-5287】Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】Red Hat Automatic Bug Reporting Tool (ABRT) contains a Privilege Escalation vulnerability, which may allow a local user with specific privileges to obtain elevated privileges through a symbolic link attack against files with predictable names. The affected products may have reached End-of-Life (EoL) and/or End-of-Support (EoS). Users are advised to discontinue use of the affected products and/or migrate to supported versions.

【CVE-2022-0995】Linux Kernel Out-of-Bounds Write Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】Linux Kernel contains an Out-of-Bounds Write vulnerability, which may allow a local user to obtain privileged access or cause a denial-of-service condition.

【CVE-2026-8452】Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Citrix NetScaler ADC and NetScaler Gateway contain an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability, which may result in denial of service.

【CVE-2019-1068】Microsoft SQL Server Remote Code Execution Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】Microsoft SQL Server contains a Remote Code Execution vulnerability, which may allow an attacker to execute code as the SQL Server Database Engine service account.

【CVE-2023-49105】ownCloud Improper Authentication Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】ownCloud contains an Improper Authentication vulnerability. If an attacker knows the victim's username and the victim has not configured a signing key, the attacker may access, modify, or delete any file without authentication.

【CVE-2026-53362】Linux Kernel Unspecified Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】Linux Kernel contains an unspecified vulnerability that may allow an attacker to escalate privileges through the IPv6 networking subsystem. This vulnerability may affect multiple products, including but not limited to Suse, Red Hat, and other products that use Linux.

【CVE-2026-66384】JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability (CVSS v3.1: 5.3)
【Whether exploited by ransomware: Unknown】JFrog Artifactory contains an Improper Limitation of a Pathname to a Restricted Directory vulnerability. Under specific remote repository conditions, this vulnerability may allow an authenticated user to write data outside the intended Docker cache path.