CyberSecBulletin

EasySoft vulnerabilities

We track 2 vulnerabilities in EasySoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.

2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score

Latest EasySoft vulnerabilities

  • 7.1 High severity

    zentaopms: Incorrect Authorization

    CVE-2026-114391EasySoft

    ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in users skip group-based ACL checks for any method containing 'ajax'. Minimal-privilege users can call methods like task.ajaxGetByID, system.

  • 9.1 Critical severity

    zentaopms: Deserialization of Untrusted Data

    CVE-2025-5114EasySoft

    A vulnerability has been found in easysoft zentaopms 21.5_20250307 and classified as critical. This vulnerability affects the function Edit of the file /index.php?m=editor&f=edit&filePath=cGhhcjovLy9ldGMvcGFzc3dk&action=edit of the component Committer. The man