Is CVE-2026-119645 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-119645 being exploited in the wild.

How severe is CVE-2026-119645?

Medium severity, with a CVSS score of 6.5, published 30 October 2026.

Which products and versions are affected?

Easysoft ZenTao PMS through 22.6.

Is there a fix for CVE-2026-119645?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-119645 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-119645?

Check whether you run Easysoft ZenTao PMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-119645: ZenTao PMS missing authorization in ajaxGetDoc

CVE-2026-119645 · Severity: medium · CVSS 6.5 · Published 2026-10-30

ZenTao PMS is an agile project management system that manages documents, tasks, and team collaboration across projects. The vulnerability allows authenticated users to read private and restricted documents by directly requesting them without proper permission checks. An attacker with basic access can enumerate document identifiers to view confidential project documentation, product plans, or private team information.

Technologies: Easysoft ZenTao PMS. Vendors: Easysoft.

Quick answers

Is CVE-2026-119645 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-119645 being exploited in the wild.
How severe is CVE-2026-119645?: Medium severity, with a CVSS score of 6.5, published 30 October 2026.
Which products and versions are affected?: Easysoft ZenTao PMS through 22.6.
Is there a fix for CVE-2026-119645?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-119645 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-119645?: Check whether you run Easysoft ZenTao PMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The doc::ajaxGetDoc() function in ZenTao PMS through version 22.6 fails to invoke checkPrivDoc() authorization checks before returning document content. Authenticated attackers can bypass access controls by sequentially guessing document IDs via AJAX requests, exposing private, draft, and library documents. No network or user interaction is required beyond initial authentication.

Affected products

EasySoft ZenTao PMS through 22.6

Timeline

2026-10-30: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.