All 5 CVE vulnerabilities found in fireshare, with AI-generated Chinese analysis, references, and POCs.
Vendor: ShaneIsrael
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54544 | Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints CWE-918 | 7.2 | High | 2026-09-15 |
| CVE-2026-54337 | Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite CWE-88 | 9.8 | Critical | 2026-09-15 |
| CVE-2026-34745 | Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public CWE-22 | 9.1 | Critical | 2026-04-02 |
| CVE-2026-33645 | Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked` CWE-22 | 7.1 | High | 2026-03-26 |
| CVE-2025-67728 | Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE) CWE-77 | 9.8 | Critical | 2025-12-12 |
All 5 known CVE vulnerabilities affecting fireshare with full Chinese analysis, references, and POCs where available.