Possible exploitation attempt against Hong Kong education sector target hosts linked to CVE-2018-11511/CVE-2021-24139/CVE-2021-31755/CVE-2021-32305 nuclei campaign

Duo Tech@duotech

•updated Jul 27, 2026•2•0•6

Detects inbound HTTP requests targeting specific hosts (photo.pokok.edu.hk, pta.sfaeps.edu.hk) with URI patterns associated with exploitation campaigns targeting vulnerabilities including CVE-2018-11511, CVE-2021-24139, CVE-2021-31755, and CVE-2021-32305.