zhontai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM zhontai CVE published 2026-10-15

CVE-2026-111355

CVE-2026-111355 is a medium-severity authorization bypass vulnerability in zhontai Admin.Core through 10.1.0. This vulnerability allows authenticated users to ignore department DataScope restrictions by supplying out-of-scope record ids. Attackers with user or organization module permissions can exploit this vulnerability to read, modify, disable, and delete users in other departments. Defenders should as [truncated]