Forwarded Taiwan Computer Network Crisis Coordination Center Cybersecurity Information Alert TWCERTCC-200-202610-00000010

[Description]
Openfind Information Technology's SecuShare Pro product has 1 critical security vulnerability (CVE-2026-107459, CVSS:9.8). This is an OS Command Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary operating system commands and execute them on the server.

[Affected Platforms]
SecuShare Pro v4

[Recommended Measures]
Cloud Version: The MailCloud (including EaaS) environment has been fully updated, and the service is not affected. Users do not need to take any additional measures.
Standard Version: SecuShare Pro users should contact the Openfind Information Technology technical service team for assistance with version updates.
Customized Version: Please confirm the system version currently in use and provide the version number to Openfind Information Technology, which will provide the corresponding security update program.

[References]
1. https://www.twcert.org.tw/tw/cp-132-11254-9c206-1.html