CVE Intelligence

ZLAN Information Technology Co. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ZLAN Information Technology Co. products: 2 record(s), with severity, exploitation and fixes.

ZLAN5143D 2

Exploited only (KEV) →

CVE-2026-25084 Critical · 9.8 CWE-306 Feb 11, 2026
ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function
Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs.
CVE-2026-24789 Critical · 9.8 CWE-306 Feb 11, 2026
ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function
An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.