Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Affected scope and exposure questions

The current feed maps Win Men Intermational/Travel Agency Management System (generic). Check affected ranges and fixed versions before updating.

Recommended response

1. 1Check inventory. Check lockfiles and deployed manifests for Win Men Intermational/Travel Agency Management System.
2. 2Review the reported fix. Monitor this advisory for an available fix and review any installs of the affected package.

Evidence timeline and material changes

1. Published upstream

   Aug 11, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

2. Source modified

   Aug 11, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

3. First seen by HOL

   Aug 11, 2026

Sources and claim methodology

• Source referencetwcert.org.tw
• Source referencetwcert.org.tw

Related CVEs

• SQL Injection vulnerability in SAP Social IntelligenceAlso CWE-89
• Socket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoSSame generic ecosystem
• UpdateHub: race condition on shared context causes out-of-bounds write and DoSSame generic ecosystem
• Double free / use-after-free in Bouffalo Lab HCI driver send() error paths (hci_bflb)Same generic ecosystem
• Double-free / use-after-free in Realtek BEE Bluetooth HCI driver `send()` error pathsSame generic ecosystem
• Cross-thread FPU register leak on ARM when FPU enabled without register sharingSame generic ecosystem

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Affected scope and exposure questions

The current feed maps Win Men Intermational/Travel Agency Management System (generic). Check affected ranges and fixed versions before updating.

Recommended response

1. 1Check inventory. Check lockfiles and deployed manifests for Win Men Intermational/Travel Agency Management System.
2. 2Review the reported fix. Monitor this advisory for an available fix and review any installs of the affected package.

Evidence timeline and material changes

1. Published upstream

   Aug 11, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

2. Source modified

   Aug 11, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

3. First seen by HOL

   Aug 11, 2026

Sources and claim methodology

• Source referencetwcert.org.tw
• Source referencetwcert.org.tw

Related CVEs

• SQL Injection vulnerability in SAP Social IntelligenceAlso CWE-89
• Socket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoSSame generic ecosystem
• UpdateHub: race condition on shared context causes out-of-bounds write and DoSSame generic ecosystem
• Double free / use-after-free in Bouffalo Lab HCI driver send() error paths (hci_bflb)Same generic ecosystem
• Double-free / use-after-free in Realtek BEE Bluetooth HCI driver `send()` error pathsSame generic ecosystem
• Cross-thread FPU register leak on ARM when FPU enabled without register sharingSame generic ecosystem