CVE-2026-119645

ZenTao PMS versions up to 22.6 are vulnerable to a missing authorization flaw in the doc::ajaxGetDoc() function. The root cause is the omission of checkPrivDoc() access checks, allowing authenticated low-privilege users to bypass permission controls. By enumerating sequential document IDs, an att...

CVE-2026-119645 ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc

ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc that allows authenticated users to read documents without checkPrivDoc access checks. Low-privilege attackers can enumerate sequential document ids to retrieve body and draft content of private documents and...

CVE-2026-119645 ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc

ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc that allows authenticated users to read documents without checkPrivDoc access checks. Low-privilege attackers can enumerate sequential document ids to retrieve body and draft content of private documents and...

CVE-2026-119645: easysoft zentaopms: ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated…

ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc that allows authenticated users to read documents without checkPrivDoc access checks. Low-privilege attackers can enumerate sequential document ids to retrieve body and draft content of private documents and...

PT-2026-115304

Name of the Vulnerable Software and Affected Versions MinDoc versions prior to 2.2-beta.3 Description An insecure direct object reference IDOR exists in the DocumentController.Content function. This allows authenticated users with a non-observer role on any book to access markdown and HTML conten...

Mindoc-org MinDoc licensing issues vulnerability

MinDoc 2.2-beta.2 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the DocumentController.Content component. Certified attackers with non-observers roles can read Markdown and HTML documents in private books by...

CVE-2026-108110

MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or...

CVE-2026-108110

The MOVO application (versions through 0.2.3 ) contains an authorization bypass vulnerability within the chat-api document endpoints. The root cause allows authenticated users to access other users' stored objects by supplying arbitrary object paths . Specifically, an attacker who knows a target'...

EUVD-2026-95883

MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or...

CVE-2026-108110 MOVO through 0.2.3 Authorization Bypass via Document Endpoints

MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or...

PT-2026-108958

Name of the Vulnerable Software and Affected Versions MOVO versions prior to 0.2.4 Description An authorization bypass exists in the chat-api document endpoints. Authenticated users can access stored objects belonging to other users by providing arbitrary object paths. By sending a known target...