CVE-2026-97866

Name of the Vulnerable Software and Affected Versions Zhonglun CloudPOS version 3.0

Description A weakness exists in the Automatic Update component within the Program.cs file. A remote attacker can manipulate the version, url, packagekey, and package name arguments to make a channel accessible to non-endpoints. This attack is highly complex and difficult to exploit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.