[CVE-2023-49105] Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities
hunt.io | vulnerability | CVE-2023-49105 | #rce | #threat-intelligence | #attack-surface | #wordpress | #apt | #cyber-espionage | #owncloud | #cve-2023-49105 | #philippines
Summary
Hunt.io details intrusions on two Philippine organizations by a suspected Chinese-speaking operator: ownCloud at a nuclear research body breached via CVE-2023-49105 (empty signing secret allowing unauthenticated WebDAV reads), and a naval contractor's WordPress site, with roughly 9GB stolen.
Why it matters
This threat intelligence report documents active targeting of critical national infrastructure and defense contractors through edge application vulnerabilities.
- CVE
- CVE-2023-49105
- Published
- Collected
--- id: 6741 title: "[CVE-2023-49105] Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities" cve: CVE-2023-49105 source_domain: hunt.io source_url: "https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor" published_at: "2026-08-26T00:00:00Z" tags: ["rce", "threat-intelligence", "attack-surface", "wordpress", "apt", "cyber-espionage", "owncloud", "cve-2023-49105", "philippines"] phying_url: "https://phying.com/item/6741" lang: en --- # [CVE-2023-49105] Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities ## Summary Hunt.io details intrusions on two Philippine organizations by a suspected Chinese-speaking operator: ownCloud at a nuclear research body breached via CVE-2023-49105 (empty signing secret allowing unauthenticated WebDAV reads), and a naval contractor's WordPress site, with roughly 9GB stolen. ## Why it matters This threat intelligence report documents active targeting of critical national infrastructure and defense contractors through edge application vulnerabilities. ## Intelligence Metadata - **Sources:** hunt.io - **CVE:** CVE-2023-49105 - **Published:** 2026-08-26T00:00:00Z - **Original:** https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor - **Phying News:** https://phying.com/item/6741