Skip to content

Advisories Active incidents Threat map Academy Services Solutions

Expert help Subscribe

Search advisories

Plain-language security advisories for IT teams in Taiwan: what happened, how it developed, and how to fix it. Every sentence is sourced.

Browse

Advisories
Active incidents
Academy
Search
Services
Solutions
Expert help

Data & reports

Threat map
Company filings
Taiwan disclosure report
Glossary

Policies

Methodology
Corrections policy
Disclaimer
Privacy
Terms
security.txt

Stay updated

Email alerts
RSS
Atom
JSON Feed

This site aggregates public information and is not security consulting advice. Test remediation steps before applying.

© 2026 資安通報

Keyword, CVE, vendor, product…

Type

Incident2

Severity

High1
Medium1

Category

Malware1
Vulnerability1

Status

Active1
Monitoring1

Industry

Cross-industry2

Domain

Web applications2
Supply chain1
Email1

Vendor

Control Web Panel（CWP）1
Roundcube1

Organization

奇安信 XLab1

Technology

Open-source package2
Linux1
Email system1

Attack vector

Unknown2

Vulnerability status

Patch available1

Actor type

Unknown2

Motivation

Unknown1

RSS for this query

2 results

●MediumVulnerabilityMonitoringPatch availableNov 9, 2026

The Roundcube team released Webmail security updates 1.

◆HighMalwareActiveNov 5, 2026· updated Nov 10

QiAnXin XLab says it captured a suspicious script, cwpsrv_update.

Subscribe to this query

Roundcube Webmail 1.6.21 and 1.7.6 fix 17 security issues including IMAP injection and SSRF filter bypasses

Linux backdoor CWPdoor hides in trojanized CWP panel server cwpsrv and suppresses access logs