CVE-2026-1734: Zhong Bang CRMEB crontab Endpoint CrontabController.php authorization
A security flaw has been discovered in Zhong Bang CRMEB up to 5.6.3. This vulnerability affects unknown code of the file crmeb/app/api/controller/v1/CrontabController.php of the component crontab Endpoint. The manipulation results in missing authorization. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1734?
CVE-2026-1734 is categorized as a security flaw with potentially high impact due to improper authorization in the CrontabController.php.
How do I fix CVE-2026-1734?
To fix CVE-2026-1734, it is recommended to update Zhong Bang CRMEB to version 5.6.4 or later.
What component is affected by CVE-2026-1734?
CVE-2026-1734 affects the crontab Endpoint, specifically the CrontabController.php file in Zhong Bang CRMEB.
What versions of Zhong Bang CRMEB are impacted by CVE-2026-1734?
Zhong Bang CRMEB versions up to and including 5.6.3 are impacted by CVE-2026-1734.
Can CVE-2026-1734 lead to unauthorized access?
Yes, CVE-2026-1734 can lead to unauthorized access due to flaws in the authorization mechanism.