HIGH 8.7 NVD
CVE-2026-113404
WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and su
WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.
References
- https://www.twcert.org.tw/en/cp-139-11297-7c6f6-2.html
- https://www.twcert.org.tw/tw/cp-132-11296-d3d95-1.html
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-10-20 via NVD.
vulnfeed aggregates 17028 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.