Vulnerabilidades do Zhonglun CloudPOS
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Zhonglun CloudPOS: 2 registro(s), com versões afetadas e correções.
CVE-2026-97871
Alta · 7.3
CWE-74 25/09/2026
Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection
A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component JSBridge. Such manipulation of the argument url leads to code injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-97866
Média · 5.6
CWE-300 25/09/2026
Zhonglun CloudPOS Automatic Update Program.cs channel accessible
A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.