What’s Vulnerable › Products

zopefoundation AccessControl vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your zopefoundation AccessControl version is affected

Latest zopefoundation AccessControl vulnerabilities

• CVE-2026-77401 — Zope AccessControl: Information disclosure through Python string `format` and `format_map` functions (CVSS 6.8)
• CVE-2024-51734 — User data deletion by anoynmous users in Zope (CVSS 8.7)
• CVE-2023-41050 — Information disclosure through Python's "format" functionality in Zope AccessControl (CVSS 7.7)
• CVE-2021-32811 — Remote Code Execution via Script (Python) objects under Python 3 (CVSS 7.2)
• CVE-2021-32807 — Remote Code Execution via unsafe classes in otherwise permitted modules (CVSS 7.2)