Vulnerabilities

TI-2026-02178 CVE-2026-2552 · GHSA-m22r-r587-48f7

ZenTao Editor control.php delete path traversal

MEDIUM 56

A vulnerability was identified in ZenTao up to 21.7.8.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00424 Published 2026-02-16 Fixed in 21.7.9 CWE-22

TI-2026-02177 CVE-2026-2551 · GHSA-8crw-7238-r6f8

MEDIUM 57

A vulnerability was determined in ZenTao up to 21.7.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00527 Published 2026-02-16 No fix listed CWE-22

TI-2026-01551 CVE-2026-1884 · GHSA-rxcq-q6q7-hm9r

MEDIUM 56

A weakness has been identified in ZenTao up to 21.7.6-85642.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00423 Published 2026-02-04 No fix listed CWE-918

TI-2025-12604 CVE-2025-13789 · GHSA-px5m-vp2j-j7xw

MEDIUM 57

A vulnerability was found in ZenTao up to 21.7.6-8564.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00322 Published 2025-11-30 Fixed in 21.7.6 CWE-918

TI-2025-12602 CVE-2025-13787 · GHSA-v63q-x4cm-x632

MEDIUM 57

A flaw has been found in ZenTao up to 21.7.6-8564.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0041 Published 2025-11-30 Fixed in 21.7.7 CWE-266