Zenario CMS is vulnerable to Remote Code Execution (RCE).

CRITICAL 9.8CVE-2022-44136 · GHSA-4p38-rc98-cr39 · Published 30/11/2022 · updated 17/06/2026

In short

CVE-2022-44136 is a CRITICAL (CVSS 9.8) vulnerability affecting tribalsystems/zenario, zenario (tribalsystems).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.0% of all vulnerabilities.
Fix: update to 9.0.57473 or later.

Package	Affected versions	Patched versions
tribalsystems/zenario Packagist	`< 9.0.57473`	`9.0.57473`
zenario tribalsystems	`= 9.3.57186`	No fix yet

Zenario CMS 9.3.57186 is vulnerable to RCE.

NVD description

Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 9.0.57473

9.0.57473

= 9.3.57186

No fix yet

More vulnerabilities in tribalsystems/zenario

See all →