Zlt2000 vulnerabilities
We track 3 vulnerabilities in Zlt2000 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest Zlt2000 vulnerabilities
- 8.1 High severity
microservices-platform: Authorization Bypass Through User-Controlled Key
zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validation. Authenticated attackers can enumerate file identifiers via GET /files and d
- 8.3 High severity
microservices-platform: Unverified Password Change
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an
- 8.8 High severity
microservices-platform: Missing Authorization
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can acc