Zlt2000 Microservices-Platform
7 CVEs affecting Zlt2000 Microservices-Platform. Latest disclosed: 2026-09-16. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92466 | High | 8.8 | 2026-09-16 | zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to f… |
CVE-2026-92467 | High | 8.3 | 2026-09-16 | zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated… |
CVE-2026-92469 | High | 8.1 | 2026-09-16 | zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs… |
CVE-2026-92468 | Medium | 6.5 | 2026-09-16 | zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to… |
CVE-2025-8841 | Medium | 6.3 | 2025-08-11 | A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0. Affected by this vulnerability is the function Upload of the file zlt-business/fi… |
CVE-2025-8738 | Medium | 5.3 | 2025-08-08 | A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnerability affects unknown code of the file… |
CVE-2025-8737 | Low | 3.5 | 2025-08-08 | A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the… |