Skip to content
OpenAdvisories

Product · zlt2000

microservices-platform

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-92469

    microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check

    zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validation. Authenticated attackers can enumerate file identifiers via GET /files and …

    zlt2000 microservices-platform
  • High 8.8
    CVE-2026-92466

    microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking

    zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can ac…

    zlt2000 microservices-platform
  • High 8.3
    CVE-2026-92467

    microservices-platform through 6.0.0 Unverified Password Change via /users/password

    zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply a…

    zlt2000 microservices-platform