Zofe vulnerabilities
We track 3 vulnerabilities in Zofe products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
Latest Zofe vulnerabilities
- 8.8 High severity
rapyd-admin: Authorization Bypass Through User-Controlled Key
Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attacke
- 7.2 High severity
rapyd-admin: Improper Privilege Management
Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users permission to assign themselves the admin role. Attackers holding roles such as the shipped o
- 9.8 Critical severity
rapyd-admin: Use of Hard-coded Credentials
Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the s