CVE-2025-50857 | ZenTaoPMS up to 18.11/21.6.beta File Upload /module/ai/control.php path traversal

February 26, 2026 Yanac

A vulnerability categorized as critical has been discovered in ZenTaoPMS up to 18.11/21.6.beta. This affects an unknown part of the file /module/ai/control.php of the component File Upload. Such manipulation leads to path traversal.

This vulnerability is referenced as CVE-2025-50857. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More