CVE-2026-2552 — ZenTao Editor control.php delete path traversal
A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delete of the file editor/control.php of the component Committer. Such manipulation…
Published: 2026-02-16 · CVSS: 5.1 · CVSS 4.0
A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delete of the file editor/control.php of the component Committer. Such manipulation of the argument filePath leads to path traversal. Upgrading to version 21.7.9 can resolve this issue. The affected component should be upgraded.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7