TI-2026-26989 CVE-2026-34745
Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public
Priority HIGH 78
Fireshare facilitates self-hosted media and link sharing.
ShaneIsrael
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
ShaneIsrael records in CISA KEVNo ShaneIsrael vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2026-39383 CVE-2026-54544
Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints
Priority HIGH 71
Fireshare facilitates self-hosted media and link sharing.
TI-2026-26026 CVE-2026-33645
Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`
Priority HIGH 68
Fireshare facilitates self-hosted media and link sharing.
TI-2025-35020 CVE-2025-55476 · GHSA-6c22-8wcx-p2wr
FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the…
Priority MEDIUM 64
FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET /api/videos/public?sort= This parameter is unsafely evaluated in a SQL ORDER BY clause without…
TI-2026-39231 CVE-2026-54337
Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite
Priority MEDIUM 50
Fireshare facilitates self-hosted media and link sharing.
TI-2025-41424 CVE-2025-67728
Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)
Priority MEDIUM 50
Fireshare facilitates self-hosted media and link sharing.