Zurich Instruments vulnerabilities
We track 2 vulnerabilities in Zurich Instruments products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Zurich Instruments vulnerabilities
- 7.8 High severity
LabOne Q: Deserialization of Untrusted Data
The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization. Prior to the fix, this mechanism accepted arbitrary fully-qualified class names from the serialized da
- 7.5 High severity
LabOne: Improper Limitation of a Pathname to a Restricted Directory
The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality. An unauthenticated attacker could exploit this vulnerability to read arbitrary files on the host system that are accessible to th