Vulnerability · Published Aug 24, 2026 · Assigned by twcert
CVE-2026-782114MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection
Critical 9.8
In plain English
A critical-severity OS command injection in 4MOSAn GCB Doctor from 4MOSAn Security Technology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.0%top 18.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| 4MOSAn Security Technology | 4MOSAn GCB Doctor | 0 – before 20260621 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.twcert.org.tw/tw/cp-132-11118-dfee4-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-11122-3d95a-2.html third-party-advisory