VYPR

ZAC

by Infonl

CVEs (1)

  • CVE-2026-55551MedOct 30, 2026
    risk 0.35cvss 6.5epss 0.00

    ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in `src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt` omit `assertPolicy`(`policyService.readZaakRechten(zaak).lezen`) authorization.…