Forwarded Taiwan Computer Emergency Response Team / Coordination Center Security Advisory TWCERTCC-200-202607-00000010

[Description]
【MetaGuru Corporation｜HCM - SQL Injection】(CVE-2026-15804，CVSS：8.8) The HCM developed by MetaGuru Corporation contains a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands through specific parameters, affecting the confidentiality, integrity, and availability of database data.

[Affected Platforms]
HCM versions 7 to 7.5.3 (exclusive), HCM versions 8 to 8.1.7.1 (exclusive)

[Recommended Actions]
Please update to HCM versions 7 to 7.5.3 (inclusive) or later, please update to HCM versions 8 to 8.1.7.1 (inclusive) or later

[References]
1.https://www.twcert.org.tw/tw/cp-132-11035-5c640-1.html