Export limit exceeded: 16042 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-91144

ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpoint

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared base directory, bypassing the intended access restrictions.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Zfile
Products
Zfile
CVE-2022-40050

ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Zfile
Products
Zfile