TOBESOFT — Vulnerabilities & Security Advisories 16

TOBESOFT develops low-code/no-code application platforms enabling rapid custom software development. Historically, their products have faced multiple remote code execution vulnerabilities, often stemming from insecure deserialization and improper input validation, alongside cross-site scripting flaws and privilege escalation risks. The company has accumulated 16 CVEs, with several critical RCE issues allowing attackers to execute arbitrary code with system-level privileges. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities in serialization mechanisms and access controls suggests potential risks for organizations relying on their platforms without implementing additional security layers.