sinamics vulnerabilities

Products

• ztnet 1

Latest sinamics CVEs

Newest publication first

1. CVE-2026-62967 ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser

   Published 2026-10-30

   High·CVSS 8.1 EPSS 0.37%

   ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through POST /api/auth/user/invalidateUser. In src/pages/api/au...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.