What’s Vulnerable › Products

SeriaWei ZKEACMS vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your SeriaWei ZKEACMS version is affected

Latest SeriaWei ZKEACMS vulnerabilities

• CVE-2026-111633 — ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key (CVSS 8.6)
• CVE-2025-11272 — SeriaWei ZKEACMS POST Request UrlRedirectionController.cs Delete improper authorization (CVSS 5.4)
• CVE-2025-10766 — SeriaWei ZKEACMS EventViewerController.cs Download path traversal (CVSS 4.3)
• CVE-2025-10765 — SeriaWei ZKEACMS SEOSuggestions ZKEACMS.SEOSuggestions.dll server-side request forgery (CVSS 7.2)
• CVE-2025-10764 — SeriaWei ZKEACMS Event Action System PendingTaskController.cs Edit server-side request forgery (CVSS 8.8)
• CVE-2025-10471 — ZKEACMS MediaController.cs Proxy server-side request forgery (CVSS 8.8)
• CVE-2025-52239 — (CVSS 9.8)
• CVE-2022-29362 — (CVSS 5.4)
• CVE-2020-20670 — (CVSS 8.8)