Skip to content
OpenAdvisories

Vendor

SeriaWei

5 known vulnerabilities.

Products

ZKEACMS 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-111633

    ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key

    ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim se…

    SeriaWei ZKEACMS