Z
ZenTao
Security Risk Profile
39
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 26, 2023 to present
10
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
39/100
low
Severity Distribution
Critical
1High
3Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
SSRF
2
3
XSS
2
4
SQL Injection
1
5
CSRF
1
Most Affected Products
1. Zentao ZenTao8
2. Zentao Biz4
3. ZenTao1
4. Zentao File Handler1
5. Zentao ZenTao Biz1
Recent Vulnerabilities
See more →CVE-2026-2552
CVSS 5.5EPSS 0%medium
ZenTao Editor control.php delete path traversal
Feb 16, 2026🔧 No Patch
CVE-2026-2551
CVSS 5.5EPSS 0%medium
ZenTao Backup control.php delete path traversal
Feb 16, 2026🔧 No Patch
CVE-2026-1884
CVSS 5.8medium
ZenTao Webhook model.php fetchHook server-side request forgery
Feb 4, 2026🔧 No Patch
CVE-2025-13789
CVSS 6.5medium
ZenTao model.php makeRequest server-side request forgery
Nov 30, 2025🔧 No Patch
CVE-2025-13787
CVSS 9.1critical
ZenTao File control.php delete privileges management
Nov 30, 2025🔧 No Patch
CVE-2022-4984
CVSS 8.7high
ZenTao Biz < 6.5, Max < 3.0, & Open Source Edition 16.5/16.5beta1 SQL Injection via user-login.html
Nov 13, 2025🔧 No Patch
CVE-2023-46375
CVSS 8.8high
Oct 27, 2023🔧 No Patch
CVE-2023-46376
CVSS 7.5high
Oct 27, 2023🔧 No Patch
CVE-2023-46374
CVSS 6.1medium
Oct 26, 2023🔧 No Patch
CVE-2023-46491
CVSS 6.1medium
Oct 26, 2023🔧 No Patch
Monitor ZenTao in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.