Skip to content
OpenAdvisories

Vendor

AtalayaLabs

1 known vulnerabilities.

Products

OxiCloud 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-111332

    OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie

    OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/…

    AtalayaLabs OxiCloud