CVE-2025-13787Medium· 5.4▾ SunlitA flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File Handler. Executing manipulation of the argument fileID can lead to improper pr…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 3.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.4%
A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File Handler. Executing manipulation of the argument fileID can lead to improper privilege management. It is possible to launch the attack remotely. Upgrading to version 21.7.7 is sufficient to fix this issue. You should upgrade the affected component.
zentao < 21.7.7Upgrade past the affected range:
zentao 21.7.7Connected by shared product, vendor, weakness, or advisory.
CVE-2025-13789Medium· 6.3A vulnerability was found in ZenTao up to 21.7.6-8564
CVE-2026-116471Medium· 4.3BKWLD Decoy Authorization Policy Policy.php privileges management
CVE-2026-116223Medium· 6.5icret EasyImage del.php privileges management
CVE-2026-109143Medium· 5.4A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0
CVE-2026-108835Medium· 4.4A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9
CVE-2026-108825Medium· 5.4A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3