CVE-2021-30176: Zerof Expert

Critical severity, CVSS 9.8. EPSS: 29% chance of exploitation in the next 30 days.

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.

Affected products

• Zerof Expert: version 2.0 only

Published 2021-04-13. Last modified 2026-06-17.