Vulnerabilities

TI-2026-00939 CVE-2026-1218 · GHSA-2gpj-j2rf-2376

XML external entity injection in Bjskzy Zhiyou ERP

MEDIUM 57

A vulnerability was detected in Bjskzy Zhiyou ERP up to 11.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00268 Published 2026-01-20 No fix listed CWE-610

TI-2025-10208 CVE-2025-11140 · GHSA-fqqp-7v7w-5xhp

HIGH 70

A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00624 Published 2025-09-29 No fix listed CWE-610

TI-2025-10207 CVE-2025-11139 · GHSA-w5xm-wm6j-f6v5

MEDIUM 57

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0075 Published 2025-09-29 No fix listed CWE-22

TI-2025-08603 CVE-2025-9391 · GHSA-2r5r-gj6c-3jf9

MEDIUM 57

A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00436 Published 2025-08-24 No fix listed CWE-74