An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

Published Aug 4, 2025 · Updated Jul 5, 2026 · Assigned by mitre