https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T16:14:35.363726+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111346 fkie_cve-2026-111346 2026-10-20T16:14:35.380680+00:00

ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and documents in products and projects they cannot access, and view targeted comment content and attachments.

 https://db.gcve.eu/vuln/ghsa-f952-gxq8-q296 GHSA-f952-gxq8-q296 2026-10-20T16:14:35.380858+00:00

ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and documents in products and projects they cannot access, and view targeted comment content and attachments.