EUVD-2026-125954

Zr.Admin.NET commit 1845017 through commit eb9228a contains a missing authorization vulnerability in TasksController.Get that allows any logged-in user to read scheduled task details without the monitor:job permission. Attackers can obtain task ids from the unprotected /monitor/jobLog/list endpoi...

CVE-2026-129466

The Zr.Admin.NET application (commits 1845017 through eb9228a) is affected by a missing authorization vulnerability in the TasksController.Get method. This flaw allows any authenticated user to access sensitive scheduled task details without possessing the required monitor:job permission. By obta...