ZenTao PMS through 22.6 Authorization Bypass via action::editComment

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-111346 · Microsoft / collected KEV context

cve-program · CVE-2026-111346

• https://hackmd.io/@hieuPenguinnn/zentaopms-action-editcomment-cross-user-idor
• https://github.com/easysoft/zentaopms/blob/zentaopms_22.6_20260917/module/action/control.php#L384-L426
• https://github.com/easysoft/zentaopms/blob/zentaopms_22.6_20260917/module/action/model.php#L2025-L2057
• https://github.com/easysoft/zentaopms
• https://www.vulncheck.com/advisories/zentao-pms-through-22.6-authorization-bypass-via-action-editcomment

No related operational record is retained in the current change model.