CVE-2022-2830: Bitdefender Gravityzone

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the environment. This issue affects: Bitdefender GravityZone Console On-Premise versions prior to 6.29.2-1. Bitdefender GravityZone Cloud Console versions prior to 6.27.2-2.

Affected products

• Bitdefender Gravityzone: before 6.27.2-2 (fixed in 6.27.2-2); before 6.29.2-1 (fixed in 6.29.2-1)

Published 2022-09-05. Last modified 2026-06-17.