Sunnet CTMS CVE-2026-7489

Consult TWCERT advisories at https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html for vendor-specific patch information and upgrade instructions; exact patched version not identified in current intelligence. Until vendor patches are applied, implement compensating controls: restrict CTMS access to authenticated users via VPN or IP allowlisting to reduce attack surface from network-based threats; enable database query logging and implement anomaly detection for unusual SQL patterns (large result sets, UNION queries, time delays indicating blind SQLi); apply web application firewall rules to detect and block common SQL injection payloads in HTTP parameters, though this provides defense-in-depth only and may cause false positives with legitimate complex queries; enforce principle of least privilege for database accounts used by the CTMS application to limit potential data exposure from successful exploitation. Note that authentication-based restrictions provide limited protection since the vulnerability requires authenticated access already.