Vulnerabilities

TI-2026-04587 CVE-2026-5252 · GHSA-4c6f-f3m2-g3pw

z-9527 admin Message Create Endpoint message.js cross site scripting

MEDIUM 56

A security flaw has been discovered in z-9527 admin 1.0/2.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00284 Published 2026-04-01 No fix listed CWE-79

TI-2026-04586 CVE-2026-5251 · GHSA-vwp7-r9vq-p5wq

MEDIUM 57

A vulnerability was identified in z-9527 admin 1.0/2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00246 Published 2026-04-01 No fix listed CWE-913

TI-2026-04359 CVE-2026-4999 · GHSA-m9h2-7m7g-5fg4

MEDIUM 57

A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00353 Published 2026-03-28 No fix listed CWE-22

TI-2026-02764 CVE-2026-3200 · GHSA-pwm4-ghcj-9c94

HIGH 70

A vulnerability was identified in z-9527 admin 1.0/2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00373 Published 2026-02-25 No fix listed CWE-74