ArkSigner Software and Hardware Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ArkSigner Software and Hardware Inc. products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-11023 Critical · 9.8 CWE-98 Oct 23, 2025

Local File Inclusion in ArkSigner's AcBakImzala

Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows PHP Local File Inclusion. This issue affects AcBakImzala: before v5.1.4.

CVE-2025-10727 Medium · 5.4 CWE-79 Oct 23, 2025

Reflected XSS in ArkSigner's AcBakImzala

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows Reflected XSS. This issue affects AcBakImzala: before v5.1.4.