Skip to content
OpenAdvisories

Vendor

IceWhaleTech

19 known vulnerabilities.

Products

ZimaOS 12 CasaOS-UserService 4 CasaOS 2 CasaOS-Gateway 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-28286 Public exploit

    ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API

    ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, the application enforces restrictions in the frontend/UI to prevent users from creating files or folders in internal OS paths. However, when…

    IceWhaleTech ZimaOS