Skip to content
OpenAdvisories

Product · zhontai

Admin.Core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-111355

    zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpoints

    zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplying out-of-scope record ids. Attackers holding user or organization module permissions with D…

    zhontai Admin.Core