CVE-2023-26784

CRITICAL 9.8CVE-2023-26784 · Published 16/03/2023 · updated 17/06/2026

In short

CVE-2023-26784 is a CRITICAL (CVSS 9.8) vulnerability affecting kirin fortress machine (tosec).
Chance of exploitation in the next 30 days (EPSS): 0.71%, higher than 53.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kirin fortress machine tosec	`= 1.7-2020-0610`	No fix yet

Description

SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.

References

gist.github.com/yinfei6/b13e7527887ac0eb809fa0b6f36305e1 · Third Party Advisory
tosec.com.cn · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free