CVE-2024-37777: Zoneland o2oa

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.

Affected products

• Zoneland o2oa: version 9.0.3 only

Published 2025-08-27. Last modified 2026-06-17.