Log in Start free

Zend

Products

ProductCVEsExploitedLatest
ZendTo2–Apr 5, 2025
Zend Server1–Oct 22, 2024

Exploited and recent CVEs

  • CVE-2025-32352 Medium 4.8 A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpret 0.3%
  • CVE-2021-47667 Critical 10.0 An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in 36.4%
  • CVE-2024-9129 Critical 9.3 Format String Injection in Zend Server 0.4%