PT-2026-8334 · Zentao · Zentao

Ez-Lbz · Publicado 2026-02-16 · Atualizado 2026-02-16 · CVE-2026-2551

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZenTao versions prior to 21.7.9

Description A flaw exists in ZenTao up to version 21.7.8 related to path traversal. The issue is located within the delete function of the editor/control.php file, part of the Backup Handler component. Manipulation of the fileName argument can lead to unauthorized file access. This issue can be triggered remotely, and details of the exploit are publicly available.

Recommendations Update to version 21.7.9 or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-2551

Produtos afetados

Zentao

Referências · 8

• 🔥 https://github.com/ez-lbz/ez-lbz.github.io/issues/10 · Exploit
• https://osv.dev/vulnerability/CVE-2026-2551 · Aviso do Fabricante
• https://vuldb.com/?ctiid.346160 · Nota
• https://t.me/CVEtracker/44812 · Publicação no Telegram
• https://vuldb.com/?submit.749983 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2551 · Nota de Segurança
• https://vuldb.com/?id.346160 · Nota
• https://t.me/cveNotify/152110 · Publicação no Telegram