Forwarded from Taiwan Computer Network Crisis Management and Coordination Center: Cybersecurity Alert TWCERTCC-200-202608-00000014

[Content Description]
【2100 Technology | Document Management System - Arbitrary File Upload】(CVE-2026-74845, CVSS: 8.8) The document management system developed by 2100 Technology contains the Arbitrary File Upload vulnerability. An authenticated remote attacker can upload and execute a backdoor program on a webpage, thereby executing arbitrary code on the server.

[Affected Platforms]
Document Management System versions prior to 5.0.105

[Recommended Actions]
Please update to version 5.0.105 or later.

[References]
1. https://www.twcert.org.tw/tw/cp-132-11108-7b14c-1.html