Skip to content
OpenAdvisories

Vendor

easysoft

6 known vulnerabilities.

Products

zentaopms 5 ZenTao PMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-114391

    ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods

    ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in users skip group-based ACL checks for any method containing 'ajax'. Minimal-privilege users can call methods like task.ajaxGetByID, system…

    easysoft zentaopms