ZLAN Information Technology Co. vulnerabilities

Products

• ZLAN5143D 2

Latest ZLAN Information Technology Co. CVEs

Newest publication first

1. CVE-2026-24789 ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function

   Published 2026-02-11

   Critical·CVSS 9.3 EPSS 0.73%

   An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.

2. CVE-2026-25084 ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function

   Published 2026-02-11

   Critical·CVSS 9.3 EPSS 0.80%

   Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.