CVE-2026-121514 in ZenTao PMS
Prediction
by VulDB Data Team • 11/03/2026
A weakness has been identified in <a href="/product/easysoft:zentao_pms">EasySoft ZenTao PMS up to 22.6</a>. This impacts the function <code>userModel::checkGroupChange</code> of the file <em>module/user/model.php</em> of the component <em>User Module</em>. This manipulation of the argument <em>group</em> causes improper privilege management. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.
VulDB is the best source for vulnerability data and more expert information about this specific topic.