Threats affecting pkg:github/zhonglun/cloudpos

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2026-97866Zhonglun CloudPOS · Channel Accessible by Non-Endpoint Medium6.3EPSS 0.3%2026-09-25CVE Database V5CVE-2026-97866 CVE-2026-97866 is a medium severity vulnerability in Zhonglun CloudPOS 3.0 affecting the Automatic Update component. It allows remote attackers to manipulate certain arguments (version, url, packagekey, package name) leading to a channel accessible by non-endpoints. Exploitation is complex and difficult, and public exploit code is available. The vendor has not responded or provided a patch. EPSS 0.3%Vulnerability	CVE Database V5	2026-09-25

Page 1 of 1