Vulnerabilidades de D-ZERO CO.,LTD.
CVEs publicadas que afetam produtos de D-ZERO CO.,LTD.: 2 registro(s), com severidade, exploração e correções.
CVE-2026-84063
Média · 6.5
CWE-434 10/09/2026
Unrestricted Upload of File with Dangerous Type em D-ZERO CO.,LTD. BurgerEditor
BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed.
CVE-2026-84062
Média · 4.3
CWE-639 10/09/2026
Authorization Bypass Through User-Controlled Key (IDOR) em D-ZERO CO.,LTD. BurgerEditor
BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of the page may be altered by an attacker who can log in to the product.