Critical severity9.8NVD Advisory· Published Feb 26, 2026· Updated Apr 15, 2026
CVE-2025-50857
CVE-2025-50857
Description
ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.