Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-119645

ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc

ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated users to read documents without checkPrivDoc() access checks. Low-privilege attackers can enumerate sequential document ids to retrieve body and draft content of private documents and restricted library, product, project, or team documents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Easysoft
Products
Zentaopms
CVE-2026-111346

ZenTao PMS through 22.6 Authorization Bypass via action::editComment

ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and documents in products and projects they cannot access, and view targeted comment content and attachments.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Easysoft
Products
Zentaopms
CVE-2026-114391

ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods

ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in users skip group-based ACL checks for any method containing 'ajax'. Minimal-privilege users can call methods like task.ajaxGetByID, system.ajaxDBAuthUrl and admin.ajaxChangeTableEngine to read data, obtain database credentials, trigger CI jobs and alter tables.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Easysoft
Products
Zentaopms