【Vulnerability Alert】2100 Technology | Official Document Management System - Arbitrary File Upload

• Subject: 【Vulnerability Alert】2100 Technology | Official Document Management System - Arbitrary File Upload

• Description:
  • Forwarded Cybersecurity Information Advisory from Taiwan Computer Emergency Response Team/Coordination Center (TWCERT/CC) TWCERTCC-200-202608-00000014
  • 【2100 Technology | Official Document Management System - Arbitrary File Upload】(CVE-2026-74845, CVSS: 8.8) The Official Document Management System developed by 2100 Technology contains an Arbitrary File Upload vulnerability. An authenticated remote attacker can upload and execute web shells, thereby executing arbitrary code on the server side.
• Affected Platforms:
  • Official Document Management System versions prior to 5.0.105 (excluding 5.0.105)
• Recommendations:
  • Please update to version 5.0.105 or later
• References:
  1. https://www.twcert.org.tw/tw/cp-132-11108-7b14c-1.html

Computer and Communication Center
Network System Division Sincerely