Read the docs

zlt2000

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

zlt2000 records in CISA KEV

No zlt2000 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Microservices-platform 1 record MEDIUM

Records

7 records

TI-2026-62353 CVE-2026-92467 · GHSA-pc4j-h2fr-9v52

microservices-platform through 6.0.0 Unverified Password Change via /users/password

Priority HIGH 73

zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00456 Published 2026-09-16 No fix listed CWE-620
TI-2026-62352 CVE-2026-92466 · GHSA-6qcx-gcjr-hrm9

microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking

Priority HIGH 73

zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00908 Published 2026-09-16 No fix listed CWE-862
TI-2026-62354 CVE-2026-92468 · GHSA-hj6r-7gmv-7mph

microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center

Priority MEDIUM 64

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00476 Published 2026-09-16 No fix listed CWE-639
Open these records in search →