easysoft CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM easysoft CVE published 2026-10-15

CVE-2026-111346

CVE-2026-111346 is an authorization bypass vulnerability in ZenTao PMS through version 22.6, specifically in the action::editComment functionality. This vulnerability allows authenticated users to read and overwrite comments from other users by manipulating the actionID parameter. The vulnerability was published on October 15, 2026, and last modified on October 16, 2026.