Vulnerabilities

TI-2026-26989 CVE-2026-34745

Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public

HIGH 78

Fireshare facilitates self-hosted media and link sharing.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00632 Published 2026-04-02 Fixed in 1.5.3 CWE-22

TI-2026-26026 CVE-2026-33645

Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`

HIGH 68

Fireshare facilitates self-hosted media and link sharing.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00438 Published 2026-03-26 No fix listed CWE-22

TI-2025-41424 CVE-2025-67728

Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)

MEDIUM 50

Fireshare facilitates self-hosted media and link sharing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00686 Published 2025-12-12 Fixed in 1.3.0 CWE-77

TI-2025-35020 CVE-2025-55476 · GHSA-6c22-8wcx-p2wr

FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the…

MEDIUM 64

FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET /api/videos/public?sort= This parameter is unsafely evaluated in a SQL ORDER BY clause without…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00266 Published 2025-09-02 No fix listed CWE-89

Vulnerabilities

Filters

Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public

Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`

Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)

FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the…