Skip to content
OpenAdvisories

Vendor

DrizzleTime

1 known vulnerabilities.

Products

Foxel 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-121555

    Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb

    Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply a VFS mount prefix and relative path to retrieve full fi…

    DrizzleTime Foxel