---
id: 6741
title: "[CVE-2023-49105] Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities"
cve: CVE-2023-49105
source_domain: hunt.io
source_url: "https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor"
published_at: "2026-08-26T00:00:00Z"
tags: ["rce", "threat-intelligence", "attack-surface", "wordpress", "apt", "cyber-espionage", "owncloud", "cve-2023-49105", "philippines"]
phying_url: "https://phying.com/item/6741"
lang: en
---

# [CVE-2023-49105] Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities

## Summary

Hunt.io details intrusions on two Philippine organizations by a suspected Chinese-speaking operator: ownCloud at a nuclear research body breached via CVE-2023-49105 (empty signing secret allowing unauthenticated WebDAV reads), and a naval contractor's WordPress site, with roughly 9GB stolen.

## Why it matters

This threat intelligence report documents active targeting of critical national infrastructure and defense contractors through edge application vulnerabilities.

## Intelligence Metadata

- **Sources:** hunt.io
- **CVE:** CVE-2023-49105
- **Published:** 2026-08-26T00:00:00Z
- **Original:** https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor
- **Phying News:** https://phying.com/item/6741