PT-2026-4732 · Unknown · Wellchoose Single Sign-On Portal System+1

Yucheng Lin · Publicado 2026-01-26 · Atualizado 2026-03-12 · CVE-2026-1427

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System (affected versions not specified) WellChoose Organization Portal System (affected versions not specified)

Description An OS Command Injection issue exists in the WellChoose Portal Systems, potentially allowing authenticated remote attackers to inject and execute arbitrary OS commands on the server. The affected systems include both the Single Sign-On Portal System and the Organization Portal System. The issue allows for the execution of commands, potentially leading to system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-1427

Produtos afetados

Wellchoose Organization Portal System

Wellchoose Single Sign-On Portal System

Referências · 14

• https://twitter.com/cracbot/status/2017191115213230221 · Publicação no Twitter
• https://twitter.com/cracbot/status/2017553493306101956 · Publicação no Twitter
• https://t.me/cveNotify/155191 · Publicação no Telegram
• https://twitter.com/TheHackerWire/status/2015711247417983144 · Publicação no Twitter
• https://t.me/cveNotify/149837 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-1427 · Nota de Segurança
• https://twitter.com/CVEnew/status/2015733317472325791 · Publicação no Twitter
• https://t.me/cveNotify/149836 · Publicação no Telegram
• https://twcert.org.tw/en/cp-139-10655-59160-2.html · Nota
• https://twitter.com/CveFindCom/status/2015706081939337564 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-1427 · Aviso do Fabricante
• https://twcert.org.tw/tw/cp-132-10654-23f40-1.html · Nota
• https://twitter.com/dailycve/status/2031943642756092174 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2015705801977938152 · Publicação no Twitter