Posting Date: 2026/10/15

【Vulnerability Alert】Wangqing Information (網擎資訊) SecuShare Pro - OS Command Injection

  • Subject: 【Vulnerability Alert】Wangqing Information (網擎資訊) SecuShare Pro - OS Command Injection


  • Description:
    • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000010
    • The SecuShare Pro product by Wangqing Information (網擎資訊) has 1 critical security vulnerability (CVE-2026-107459, CVSS: 9.8). This is an OS Command Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary operating system commands and execute them on the server.
  • Affected Platforms:
    • SecuShare Pro v4
  • Recommended Actions:
    • Cloud edition: The MailCloud (including EaaS) environment has been fully updated; the service is not affected and users do not need to take additional actions. Standard edition: SecuShare Pro users should contact the Wangqing Information (網擎資訊) technical service team for assistance with the version update. Custom edition: Please confirm the currently used system version and provide the version number to Wangqing Information (網擎資訊), which will provide the corresponding security update program.
  • References:
    1. https://www.twcert.org.tw/tw/cp-132-11254-9c206-1.html

Computer and Communication Center
Network System Division