CVE-2026-97866 | Zhonglun CloudPOS 3.0 Automatic Update Program.cs version/url/packagekey/package name channel accessible

A vulnerability was found in Zhonglun CloudPOS 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint.

This vulnerability is tracked as CVE-2026-97866. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More