CVE-2022-36537Vulnerability
ZK Framework AuUploader Unspecified Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 years ago
CISA KEVAdded 27 Feb 2023
Fix due 20 Mar 2023
Used by ransomware: knownCISA KEV catalogue
Fix due 20 Mar 2023
Used by ransomware: knownCISA KEV catalogue
EPSS95.4%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
ConnectWise/R1Soft RCE & Supply Chain Risks“…tWise’s R1Soft Server Backup Manager software has now been seen exploited in the wild to deploy backdoors on hundreds of servers via CVE-2022-36537.”
Thanks — we review every report.