Vulnerability Description
U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Edetw | U-Office Force | < 29.50 |
Related Weaknesses (CWE)
References
- https://www.twcert.org.tw/en/cp-139-10743-9a952-2.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-10742-45b13-1.htmlThird Party Advisory
FAQ
What is CVE-2026-3422?
CVE-2026-3422 is a vulnerability with a CVSS score of 9.8 (CRITICAL). U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted ...
How severe is CVE-2026-3422?
CVE-2026-3422 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-3422?
Check the references section above for vendor advisories and patch information. Affected products include: Edetw U-Office Force.