zfile-dev

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

zfile-dev records in CISA KEV

No zfile-dev vulnerabilities are listed in CISA KEV.

1 record

TI-2026-61905 CVE-2026-91144 · GHSA-rq8c-9999-42w5

MEDIUM 44

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00506 Published 2026-09-14 No fix listed CWE-639