What’s Vulnerable › Products

mykiot KiotViet Sync vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your mykiot KiotViet Sync version is affected

Latest mykiot KiotViet Sync vulnerabilities

• CVE-2025-12677 — KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure (CVSS 5.3)
• CVE-2025-12676 — KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass (CVSS 5.3)
• CVE-2025-12675 — KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update (CVSS 4.3)
• CVE-2025-12674 — KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload (CVSS 9.8)