Ghostwire

CVE-2026-78211: 4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated...

CRITICAL CVSS 9.8 Exploit Available

Published: August 24, 2026 | Last Modified: August 24, 2026

Description

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.

Ghostwire Analysis — What This Means Practically

Critical CVSS score indicates maximum severity — remote code execution, authentication bypass, or complete system compromise is likely possible.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

www.twcert.org.tw/en/cp-139-11122-3d95a-2.html
www.twcert.org.tw/tw/cp-132-11118-dfee4-1.html
www.tenable.com/cve/CVE-2026-78211
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-78211