Log in Start free

mykiot

Products

ProductCVEsExploitedLatest
KiotViet Sync4–Nov 5, 2025

Exploited and recent CVEs

  • CVE-2025-12675 Medium 4.3 KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.2%
  • CVE-2025-12676 Medium 5.3 KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass 0.3%
  • CVE-2025-12674 Critical 9.8 KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload 0.8%
  • CVE-2025-12677 Medium 5.3 KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure 0.3%