Known Vulnerabilities for Zentao Max by Easycorp
Listed below are 1 of the newest known vulnerabilities associated with "Zentao Max" by "Easycorp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125747 json | ZenTao PMS through 22.7 contains a missing object-level authorization vulnerability in module/build/control.php that allows a... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-121514 json | A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of th... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119645 json | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated users t... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-114391 json | ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in user... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-111346 json | ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2023-44827 json | An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an at... | 8.8 - HIGH | 2023-10-10 | 2023-10-11 |