SeriaWei vulnerabilities
We track 3 vulnerabilities in SeriaWei products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest SeriaWei vulnerabilities
- 8.6 High severity
ZKEACMS: Use of Hard-coded Cryptographic Key
ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set
- 7.2 High severity
ZKEACMS: Server-Side Request Forgery
A security flaw has been discovered in SeriaWei ZKEACMS up to 4.3. This vulnerability affects the function CheckPage/Suggestions in the library cms-v4.3\wwwroot\Plugins\ZKEACMS.SEOSuggestions\ZKEACMS.SEOSuggestions.dll of the component SEOSuggestions. Performi
- 8.8 High severity
ZKEACMS: Server-Side Request Forgery
A vulnerability was identified in SeriaWei ZKEACMS up to 4.3. This affects the function Edit of the file src/ZKEACMS.EventAction/Controllers/PendingTaskController.cs of the component Event Action System. Such manipulation of the argument Data leads to server-s