Advisories · Technology

zlt2000 microservices-platform.

Every CVE that names zlt2000 microservices-platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92469 CVE record

CVSS 7.2 High

microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check
- zlt2000 microservices-platform
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-92468 CVE record

CVSS 7.1 High

microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center
- zlt2000 microservices-platform
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-92467 CVE record

CVSS 8.7 High

microservices-platform through 6.0.0 Unverified Password Change via /users/password
- zlt2000 microservices-platform
- CWE-620
Not analysed yet 16 Sept 2026
CVE-2026-92466 CVE record

CVSS 8.7 High

microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
- zlt2000 microservices-platform
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2025-8841 CVE record

CVSS 5.3 Medium

zlt2000 microservices-platform FileController.java upload unrestricted upload
- zlt2000 microservices-platform
- Broken access control
- Unrestricted file upload
Not analysed yet 11 Aug 2025
CVE-2025-8738 CVE record

CVSS 6.9 Medium

zlt2000 microservices-platform Spring Actuator Interface actuator information disclosure
- zlt2000 microservices-platform
- Information disclosure
- Broken access control
Not analysed yet 8 Aug 2025
CVE-2025-8737 CVE record

CVSS 5.1 Medium

zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect
- zlt2000 microservices-platform
- Open redirect
Not analysed yet 8 Aug 2025