Skip to content
OpenAdvisories

Product · AtalayaLabs

OxiCloud

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-111332

    OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie

    OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/…

    AtalayaLabs OxiCloud