Skip to content
OpenAdvisories

Vendor

sinamics

1 known vulnerabilities.

Products

ztnet 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-62967

    ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser

    ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through `POST /api/auth/user/invalidateUse…

    sinamics ztnet