Zend ZendTo vulnerabilities

2 published CVEs name Zend ZendTo among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 1
Known exploited: 0

Critical 1High 0Medium 1Low 0Not scored 0

Newest CVEs

CVE-2025-32352
A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords…
Zend · ZendTo
Medium4.8
CVE-2021-47667
An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute…
Zend · ZendTo
Critical10.0

Most common weaknesses