Skip to content
OpenAdvisories

Archive

3 January 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34171 Public exploit

    CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure

    CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information. The /v1/users/image endpoint can be abused with a user-controlled path par…