CVE-2025-41029: Zeon Global Tech Zeon Academy Pro

Critical severity, CVSS 9.3. EPSS: 0.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'.

Affected products

Published 2026-04-21. Last modified 2026-10-07.