CVE-2026-78211: 4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-24 · updated 2026-10-12
Weakness: CWE-78

Description

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.

Affected products

4MOSAn Security Technology 4MOSAn GCB Doctor: before 20260621 — fixed in 20260621

How to fix

Upgrade to a fixed version: 4MOSAn Security Technology 4MOSAn GCB Doctor 20260621. Check the vendor advisory for mitigations.

References

https://www.twcert.org.tw/en/cp-139-11122-3d95a-2.html
https://www.twcert.org.tw/tw/cp-132-11118-dfee4-1.html

Get alerted when CVE-2026-78211 or the next vulnerability affects your stack