OS Command Injection Vulnerability in GCB Doctor by 4MOSAn Security Technology
CVE-2026-78211

9.3CRITICAL

Key Information:

Vendor

4mosan Security Technology

Status
4mosan Gcb Doctor
Vendor
CVE Published:
24 August 2026

What is CVE-2026-78211?

The GCB Doctor application by 4MOSAn Security Technology is susceptible to an OS Command Injection vulnerability. This flaw allows unauthenticated remote attackers to inject and execute arbitrary system commands via an unfiltered ADOdb test page parameter. Exploiting this vulnerability could lead to significant security breaches, including unauthorized access and system compromise.

Affected Version(s)

4MOSAn GCB Doctor 0 < 20260621

References

https://www.twcert.org.tw/tw/cp-132-11118-dfee4-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-11122-3d95a-2.html
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.