CVE-2026-1018

Summary

Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files.

Affected Software

Weaknesses

• CWE-36: CWE-36 Absolute Path Traversal

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.twcert.org.tw/tw/cp-132-10637-3e4b3-1.html
• https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html

• ←Previous
• Next→