CVE-2026-55551

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

CVE-2026-55551 ZAC: Missing per-zaaktype authorization on by-ID decision and process reads

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

CVE-2026-55551

The ZAC open-source workflow component for Dutch municipal case management is vulnerable to an improper authorization flaw in versions prior to 5.2.0 . The ZaakRestService.kt file omits necessary assertPolicy checks on by-id read endpoints. Consequently, an authenticated low-privileged user who k...

EUVD-2026-114196

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

CVE-2026-55551: infonl dimpact-zaakafhandelcomponent: ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

Stored-XSS-via-Role-Attributes

Ziti Admin Console — Security Report Store...

Exploit for CVE-2024-36527

CVE-2024-36527 PoC and Bulk Scanner !Bannerscreens/screen.j...

CVE-2022-0556

A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator ZAC version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator...

CVE-2022-0556

CVE-2022-0556 describes a local privilege escalation in Zyxel AP Configurator (ZAC) version 1.1.4 caused by incorrect permission assignment in some directories. This allows an attacker to execute arbitrary code as a local administrator. Connected advisories (e.g., ZDI, PT-2022-13258) indicate a r...

CVE-2022-0556

A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator ZAC version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator...