CVE-2026-121514Medium· 6.3▾ SunlitA weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improp…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improper privilege management. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.
zentao_pms 22.0zentao_pms 22.1zentao_pms 22.2zentao_pms 22.3zentao_pms 22.4zentao_pms 22.5zentao_pms 22.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-122016Medium· 6.3yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management
CVE-2026-120185Medium· 4.7ken678 YznCMS Auth Group Group.php Backend privileges management
CVE-2026-116471Medium· 4.3BKWLD Decoy Authorization Policy Policy.php privileges management
CVE-2026-116223Medium· 6.5icret EasyImage del.php privileges management
CVE-2026-109143Medium· 5.4A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0
CVE-2026-108835Medium· 4.4A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9