【Vulnerability Alert】Think Software Technology｜EFence - Arbitrary File Upload

• Subject: 【Vulnerability Alert】Think Software Technology｜EFence - Arbitrary File Upload

• Content:
  • Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Alert TWCERTCC-200-202608-00000020
  • 【Think Software Technology｜EFence - Arbitrary File Upload】(CVE-2026-80235, CVSS: 9.8) An unauthenticated remote attacker can upload and execute web webshells, thereby executing arbitrary code on the server side.
  • 【Think Software Technology｜EFence - Arbitrary File Upload】(CVE-2026-80237, CVSS: 8.8) An authenticated remote attacker can upload and execute web webshells, thereby executing arbitrary code on the server side.
• Affected Platforms:
  • EFence version 1.2.66 DB Ver:56 and earlier versions
• Recommendations:
  • Please update to version 1.2.67 DB Ver:57 or later
• References:
  1. https://www.twcert.org.tw/tw/cp-132-11133-e0167-1.html

Computer and Communication Center
Network System Division Respectfully