Zr.Admin.NET vulnerabilities

CVEs whose affected-version data names the Zr.Admin.NET package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111669Medium· 6.5

today

ZR.Admin.NET through 3.8.2 SQL Injection via PagerInfo.Sort ORDER BY

ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attackers to manipulate the ORDER BY clause by supplying a crafted PagerInfo.Sort query parameter to the shared ToPage paging helper. Attackers …

▾ Sunlitizhaorui · Zr.Admin.NETvia CVEORG