CVE-2026-80236

Description

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents.

CVSS Vector

References

• https://www.twcert.org.tw/en/cp-139-11137-c6e5f-2.html
• https://www.twcert.org.tw/tw/cp-132-11133-e0167-1.html