Simopro Technology - vulnerabilities (CVEs)

8 CVEs in 3 products, 0 in the last 30 days, newest from 2026-04-16.

Products

• Winmatrix3 Web Package - 4 CVEs
• Winmatrix3 - 3 CVEs
• Winmatrix - 1 CVEs

Newest CVEs of Simopro Technology

• CVE-2026-6348 - CVSS 9.3 (critical), 2026-04-16: WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code…
• CVE-2025-7920 - CVSS 6.1 (medium), 2025-07-21: WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to…
• CVE-2025-7919 - CVSS 7.1 (high), 2025-07-21: WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL…
• CVE-2025-7918 - CVSS 9.8 (critical), 2025-07-21: WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL…
• CVE-2025-7917 - CVSS 8.6 (high), 2025-07-21: WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to…
• CVE-2025-7916 - CVSS 9.8 (critical), 2025-07-21: WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code…
• CVE-2024-7202 - CVSS 9.8 (critical), 2024-07-29: The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to…
• CVE-2024-7201 - CVSS 9.8 (critical), 2024-07-29: The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to…