Jump to the main content block
  1. Home
  2. Information Security
  3. Vulnerability Alert

【Vulnerability Alert】Chin Chun Information | Police Statistical Database System – Two Critical Security Vulnerabilities Identified (CVE-2026-1019) (CVE-2026-1021)

publish date : 2026-01-26 update date : 2026-01-26

Source: Ministry of education information & communication security contingency platform

"" "" ""

Publication Number TACERT-ANA-2026012009014747 Publication Time 2026/01/20 09:43
Incident Type ANA-Vulnerability Alert Discovery Time 2026/01/20 09:43
Impact Level Low  
[Subject]
【Vulnerability Alert】Chin Chun Information | Police Statistical Database System – Two Critical Security Vulnerabilities Identified (CVE-2026-1019) (CVE-2026-1021)

[Content]
Forwarded from TWCERTCC-200-202601-00000017

【Chin Chun Information | Police Statistical Database System – Missing Authentication】 (CVE-2026-1019, CVSS: 9.8) A Missing Authentication vulnerability exists in the Police Statistical Database System. An unauthenticated remote attacker can exploit specific functions to read, modify, and delete database contents.

【Chin Chun Information | Police Statistical Database System – Arbitrary File Upload】 (CVE-2026-1021, CVSS: 9.8) An Arbitrary File Upload vulnerability exists in the Police Statistical Database System. An unauthenticated remote attacker can upload and execute web shell backdoor programs, thereby executing arbitrary code on the server.

(Information Sharing Level: WHITE (Information content can be publicly disclosed)
[Affected Platform]
Police Statistical Database System versions 1.0.2 and earlier
[Recommended Actions]
Update to version 1.0.3 or later.
[Reference]
https://www.twcert.org.tw/tw/cp-132-10637-3e4b3-1.html
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer: Computer Center
Click Num:
Print