Browse all 6 CVE security advisories affecting M2Team. AI-powered Chinese analysis, POCs, and references for each vulnerability.
M2Team develops software primarily used in enterprise environments, with their products focusing on system management and remote access solutions. Historically, their vulnerabilities have commonly included remote code execution, cross-site scripting, and privilege escalation flaws. The team has addressed multiple critical security issues, with six CVEs currently documented in their record. While no major public security incidents have been widely reported, their vulnerability history suggests a pattern of input validation weaknesses and insufficient access controls in their software. Security researchers have noted that patches for their issues often arrive with significant delays, leaving exposed systems vulnerable to exploitation for extended periods.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-27711 | NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length — NanaZipCWE-125 | 7.8AI | HighAI | 2026-02-25 |
| CVE-2026-27710 | NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS) — NanaZipCWE-191 | 7.5AI | HighAI | 2026-02-25 |
| CVE-2026-27709 | NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength — NanaZipCWE-125 | 9.1AI | CriticalAI | 2026-02-25 |
| CVE-2026-27114 | NanaZip has ROMFS Archive Infinite Loop — NanaZipCWE-835 | 7.5 | - | 2026-02-19 |
| CVE-2026-27014 | NanZip has ROMFS Archive Infinite Loop / Stack Overflow — NanaZipCWE-674 | 6.2 | - | 2026-02-19 |
| CVE-2026-26282 | NanaZip has DotNet Single file OOB Heap Read — NanaZipCWE-126 | 7.1 | - | 2026-02-19 |
This page lists every published CVE security advisory associated with M2Team. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.