Multiple Vulnerabilities in Internet-Facing Systems Targeting Hong Kong’s Education Sector

CVE-2018-11511CVE-2018-16167CVE-2018-17254CVE-2020-25223CVE-2020-26919CVE-2020-35713CVE-2020-7796CVE-2021-1498CVE-2021-24139CVE-2021-31755CVE-2021-32305CVE-2021-36380CVE-2022-26143

July 24, 2026 · HKCERT · Severity: HIGH

HKCERT has received threat intelligence indicating that threat actors are attempting to target Internet-facing systems of Hong Kong’s education sector by scanning for and exploiting their vulnerabilities.

Key Takeaways

HKCERT has received threat intelligence indicating that threat actors are attempting to target Internet-facing.
Successful exploitation could result in remote code execution, denial of service condition and security restriction.