TVN ID	TVN-202603002
CVE ID	CVE-2026-3422
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	U-Office Force version 29.50 and earlier
Description	U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.
Solution	Please update to version 29.50SP1 or later.
Credit	Ting-Wei Hsieh, Chih-Chiang Tseng(CHT Security)
Public Date	2026-03-02