TI-2026-22992 CVE-2026-28798
Arbitrary internal service access via /v1/sys/proxy when Cloudflare Tunnel is enabled on ZimaOS
Priority MEDIUM 43
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Vulnerabilities
12 records
TI-2026-22712 CVE-2026-28442
ZimaOS: Arbitrary Deletion of Internal System Files via API Path Manipulation
Priority HIGH 72
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Priority LOW 31
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
TI-2026-22593 CVE-2026-28286
ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API
Priority MEDIUM 43
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Priority HIGH 82
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Priority MEDIUM 57
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Priority MEDIUM 55
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Priority HIGH 74
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Priority MEDIUM 63
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
TI-2024-32945 CVE-2024-49357
ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leak
Priority HIGH 72
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
TI-2024-32627 CVE-2024-48932
ZimaOS Unauthenticated API Discloses Usernames
Priority MEDIUM 63
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.
Priority HIGH 74
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.