zentaopms vulnerabilities

CVEs whose affected-version data names the zentaopms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111346Medium· 5.4

yesterday

ZenTao PMS through 22.6 Authorization Bypass via action::editComment

ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequentia…

▾ Sunliteasysoft · zentaopmsvia CVEORG