goshs-labs

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

goshs-labs records in CISA KEV

No goshs-labs vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-44497 CVE-2026-62325 · GHSA-rjrw-mjq6-hpmm

goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

HIGH 80

goshs is a feature-rich single-binary file server for red teamers and developers.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00426 Published 2026-07-28 Fixed in 2.1.4 CWE-306

TI-2026-46372 CVE-2026-64863 · GHSA-hq33-8jgp-8qq3

goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

HIGH 78

goshs is a feature-rich single-binary file server for red teamers and developers.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00423 Published 2026-07-28 Fixed in 2.1.4 CWE-284

TI-2026-39533 CVE-2026-54719 · GHSA-rmxw-pq4x-3fvh

Missing authorization in goshs-labs goshs

HIGH 72

goshs is a feature-rich single-binary file server for red teamers and developers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00352 Published 2026-07-28 Fixed in 2.1.1 CWE-862

TI-2026-47040 CVE-2026-66063 · GHSA-wg2q-39h6-66x9

goshs has a Path Traversal issue

LOW 35

goshs is a feature-rich single-binary file server for red teamers and developers.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00343 Published 2026-07-28 Fixed in 2.1.5, 2.1.5-0.20260727065949-f3ef599e4091 CWE-22

TI-2026-47041 CVE-2026-66064 · GHSA-964w-f6gj-5236

goshs has ACL Bypass & Path Traversal

LOW 30

goshs is a feature-rich single-binary file server for red teamers and developers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00445 Published 2026-07-28 Fixed in 2.1.5, 2.1.5-0.20260727065949-f3ef599e4091 CWE-41

Open these records in search →