Vulnerability in Zend Server
CVE-2024-9129
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino
EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.
Affected products
- Zend Server — versions 8.5
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-9129?
- CVE-2024-9129 is a vulnerability in Zend Server, classified under Use of Externally-Controlled Format String. Published 2024-10-22.
- Is CVE-2024-9129 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.