【Vulnerability Alert】Wangqing Information (網擎資訊) SecuShare Pro - OS Command Injection

• Subject: 【Vulnerability Alert】Wangqing Information (網擎資訊) SecuShare Pro - OS Command Injection

• Description:
  • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000010
  • The SecuShare Pro product by Wangqing Information (網擎資訊) has 1 critical security vulnerability (CVE-2026-107459, CVSS: 9.8). This is an OS Command Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary operating system commands and execute them on the server.
• Affected Platforms:
  • SecuShare Pro v4
• Recommended Actions:
  • Cloud edition: The MailCloud (including EaaS) environment has been fully updated; the service is not affected and users do not need to take additional actions. Standard edition: SecuShare Pro users should contact the Wangqing Information (網擎資訊) technical service team for assistance with the version update. Custom edition: Please confirm the currently used system version and provide the version number to Wangqing Information (網擎資訊), which will provide the corresponding security update program.
• References:
  1. https://www.twcert.org.tw/tw/cp-132-11254-9c206-1.html

Computer and Communication Center
Network System Division