Security Advisory

CVE-2025-50857

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-26 00:00:00
Last updated 2026-02-26 18:48:30
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload