ZLAN Information Technology Co.

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ZLAN Information Technology Co. records in CISA KEV

No ZLAN Information Technology Co. vulnerabilities are listed in CISA KEV.

2 records

TI-2026-20259 CVE-2026-25084 · GHSA-g3vf-cx4m-ph4q

MEDIUM 49

Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00796 Published 2026-02-11 No fix listed CWE-306

TI-2026-19988 CVE-2026-24789 · GHSA-r6ff-p4vx-28hv

MEDIUM 49

An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00728 Published 2026-02-11 No fix listed CWE-306