CVE-2026-111346mediumCWE-639

CVE-2026-111346: medium-severity vulnerability in easysoft zentaopms

ZenTao PMS through 22.6 Authorization Bypass via action::editComment

Published · Updated

Follow this CVE+ Monitor zentaopms

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.3%
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and documents in products and projects they cannot access, and view targeted comment content and attachments.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
easysoft · zentaopms
Related CVEs — easysoft zentaopms

In the same product, most dangerous first.

CVE-2025-5114MEDIUMeasysoft zentaopms Editor index.php edit deserializationEPSS 0.6%CVE-2026-119645HIGHZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDocEPSS 0.4%CVE-2026-114391HIGHZenTao PMS before 22.3 Authorization Bypass via Ajax Controller MethodsEPSS 0.3%