[ Vendor · 2 CVEs ]

easysoft

CVEs affecting easysoft published in the last 30 days, plus any easysoft CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-114391 21 Oct 2026 CVSS 7.1 easysoft zentaopmsZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in users skip group-based ACL…
CVE-2026-111346 15 Oct 2026 CVSS 5.4 easysoft zentaopmsZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite…