SeriaWei ZKEACMS

• CVE-2026-111633 High 8.6 ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key 0.4%
• CVE-2025-11272 Medium 5.4 SeriaWei ZKEACMS POST Request UrlRedirectionController.cs Delete improper authorization 0.3%
• CVE-2025-10766 Medium 4.3 SeriaWei ZKEACMS EventViewerController.cs Download path traversal 0.6%
• CVE-2025-10765 Medium 4.7 SeriaWei ZKEACMS SEOSuggestions ZKEACMS.SEOSuggestions.dll server-side request forgery 0.4%
• CVE-2025-10764 Medium 6.3 SeriaWei ZKEACMS Event Action System PendingTaskController.cs Edit server-side request forgery 0.5%