Forwarded from Taiwan Computer Emergency Response Team / Coordination Center Information Security Alert TWCERTCC-200-202604-00000028

【CVE-2024-27199】JetBrains TeamCity Relative Path Traversal Vulnerability (CVSS v3.1: 7.3)
【Whether exploited by ransomware: Known】 JetBrains TeamCity contains a relative path traversal vulnerability, which may lead to the ability to perform limited administrator operations.

【CVE-2026-33825】Microsoft Defender Insufficient Granularity of Access Control Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】 Microsoft Defender contains an insufficient granularity of access control vulnerability, which may allow an authorized attacker to perform privilege escalation locally.

【CVE-2026-39987】Marimo Remote Code Execution Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】 Marimo contains a pre-authentication remote code execution vulnerability, allowing an unauthenticated attacker to obtain shell access and execute arbitrary system commands.

【CVE-2025-29635】D-Link DIR-823X Command Injection Vulnerability (CVSS v3.1: 7.2)
【Whether exploited by ransomware: Unknown】 D-Link DIR-823X contains a command injection vulnerability, allowing an authorized attacker to execute arbitrary commands on the remote device by sending a POST request to /goform/set_prohibiting. The affected product may have reached the end-of-life (EoL) or end-of-service (EoS) stage. Users are advised to stop using this product.

【CVE-2024-7399】Samsung MagicINFO 9 Server Path Traversal Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】 Samsung MagicINFO 9 Server contains a path traversal vulnerability, which may allow an attacker to write arbitrary files with system privileges.

【CVE-2024-57728】SimpleHelp Path Traversal Vulnerability (CVSS v3.1: 7.2)
【Whether exploited by ransomware: Unknown】 SimpleHelp contains a path traversal vulnerability, allowing an administrator user to upload arbitrary files to any location in the file system by uploading a specially crafted ZIP file. This vulnerability can be exploited to allow an attacker to execute arbitrary code on the host as the SimpleHelp server user.

【CVE-2024-57726】SimpleHelp Missing Authorization Vulnerability (CVSS v3.1: 9.9)
【Whether exploited by ransomware: Unknown】 SimpleHelp contains a missing authorization vulnerability, which may allow a low-privileged technician to create API keys with excessive privileges. These API keys can be used to escalate privileges to the server administrator role.