TI-2026-39383 CVE-2026-54544
Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints
Priority HIGH 71
Fireshare facilitates self-hosted media and link sharing.
Vulnerabilities
6 records
TI-2026-39231 CVE-2026-54337
Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite
Priority MEDIUM 50
Fireshare facilitates self-hosted media and link sharing.
TI-2026-26989 CVE-2026-34745
Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public
Priority HIGH 78
Fireshare facilitates self-hosted media and link sharing.
TI-2026-26026 CVE-2026-33645
Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`
Priority HIGH 68
Fireshare facilitates self-hosted media and link sharing.
TI-2025-41424 CVE-2025-67728
Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)
Priority MEDIUM 50
Fireshare facilitates self-hosted media and link sharing.
TI-2025-35020 CVE-2025-55476 · GHSA-6c22-8wcx-p2wr
FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the…
Priority MEDIUM 64
FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET /api/videos/public?sort= This parameter is unsafely evaluated in a SQL ORDER BY clause without…