Skip to content
OpenAdvisories

Product · zfile-dev

zfile

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-91144

    ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpoint

    ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared base directory…

    zfile-dev zfile