T+ vulnerabilities

1 known vulnerability in T+ from Changjetong Information Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  T+: Deserialization of Untrusted Data

  CVE-2023-7334Jan 15, 2026Changjetong Information TechnologyEPSS 1.1%

  Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind._PriorityLevel,App_Co