zimaspace kayıtları
zimaspace üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %8,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-250 Execution with Unnecessary Privileges2
- CWE-73 External Control of File Name or Path2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-284 Improper Access Control1
- CWE-287 Improper Authentication1
- CWE-552 Files or Directories Accessible to External Parties1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-21891Kavram kanıtı | ZimaOS has Authentication Bypass via System-Level Usernamezimaspace · zimaos · CWE-287 | Kritik9,8 | — | %2,3 | 8 Oca 2026 |
40Planlayın | CVE-2026-28798İstismar yok | Arbitrary internal service access via /v1/sys/proxy when Cloudflare Tunnel is enabled on ZimaOSzimaspace · zimaos · CWE-918 | Kritik10,0 | — | %0,3 | 3 Nis 2026 |
39İzleyin | CVE-2026-28286Kavram kanıtı | ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via APIzimaspace · zimaos · CWE-73 | Kritik9,9 | — | %0,4 | 2 Mar 2026 |
37İzleyin | CVE-2024-49357Kavram kanıtı | ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leakzimaspace · zimaos · CWE-200 | Yüksek7,5 | — | %23,6 | 24 Eki 2024 |
34İzleyin | CVE-2026-28442İstismar yok | ZimaOS: Arbitrary Deletion of Internal System Files via API Path Manipulationzimaspace · zimaos · CWE-73 | Yüksek8,5 | — | %0,3 | 5 Mar 2026 |
30İzleyin | CVE-2024-49359İstismar yok | ZimaOS vulnerable to Directory Listing via Parameter Manipulationzimaspace · zimaos · CWE-552 | Yüksek7,5 | — | %0,9 | 24 Eki 2024 |
30İzleyin | CVE-2024-48931İstismar yok | ZimaOS Arbitrary File Read via Parameter Manipulationzimaspace · zimaos · CWE-22 | Yüksek7,5 | — | %0,7 | 24 Eki 2024 |
26İzleyin | CVE-2025-64427İstismar yok | ZimaOS is vulnerable to Server-Side Request Forgery (SSRF)zimaspace · zimaos · CWE-200 | Orta6,5 | — | %0,2 | 2 Mar 2026 |
21İzleyin | CVE-2024-48932İstismar yok | ZimaOS Unauthenticated API Discloses Usernameszimaspace · zimaos · CWE-284 | Orta5,3 | — | %0,5 | 24 Eki 2024 |
21İzleyin | CVE-2024-49358İstismar yok | ZimaOS vulnerable to Username Enumeration via API Responseszimaspace · zimaos · CWE-203 | Orta5,3 | — | %0,4 | 24 Eki 2024 |
20İzleyin | CVE-2025-58432İstismar yok | ZimaOS Privilege Escalation using localhost calls to File API Uploadzimaspace · zimaos · CWE-250 | Orta5,2 | — | %0,1 | 17 Eyl 2025 |
19İzleyin | CVE-2025-58431İstismar yok | ZimaOS reads arbitrary files using localhost calls to File API Downloadzimaspace · zimaos · CWE-250 | Orta4,8 | — | %0,2 | 17 Eyl 2025 |
- CVE-2026-2189140Planlayın
ZimaOS has Authentication Bypass via System-Level Username
KritikCVSS 9,8Kavram kanıtıEPSS %2zimaspace · zimaos8 Oca 2026
- CVE-2026-2879840Planlayın
Arbitrary internal service access via /v1/sys/proxy when Cloudflare Tunnel is enabled on ZimaOS
KritikCVSS 10,0İstismar yokEPSS %0zimaspace · zimaos3 Nis 2026
- CVE-2026-2828639İzleyin
ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API
KritikCVSS 9,9Kavram kanıtıEPSS %0zimaspace · zimaos2 Mar 2026
- CVE-2024-4935737İzleyin
ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leak
YüksekCVSS 7,5Kavram kanıtıEPSS %23zimaspace · zimaos24 Eki 2024
- CVE-2026-2844234İzleyin
ZimaOS: Arbitrary Deletion of Internal System Files via API Path Manipulation
YüksekCVSS 8,5İstismar yokEPSS %0zimaspace · zimaos5 Mar 2026
- CVE-2024-4935930İzleyin
ZimaOS vulnerable to Directory Listing via Parameter Manipulation
YüksekCVSS 7,5İstismar yokEPSS %0zimaspace · zimaos24 Eki 2024
- CVE-2024-4893130İzleyin
ZimaOS Arbitrary File Read via Parameter Manipulation
YüksekCVSS 7,5İstismar yokEPSS %0zimaspace · zimaos24 Eki 2024
- CVE-2025-6442726İzleyin
ZimaOS is vulnerable to Server-Side Request Forgery (SSRF)
OrtaCVSS 6,5İstismar yokEPSS %0zimaspace · zimaos2 Mar 2026
- CVE-2024-4893221İzleyin
ZimaOS Unauthenticated API Discloses Usernames
OrtaCVSS 5,3İstismar yokEPSS %0zimaspace · zimaos24 Eki 2024
- CVE-2024-4935821İzleyin
ZimaOS vulnerable to Username Enumeration via API Responses
OrtaCVSS 5,3İstismar yokEPSS %0zimaspace · zimaos24 Eki 2024
- CVE-2025-5843220İzleyin
ZimaOS Privilege Escalation using localhost calls to File API Upload
OrtaCVSS 5,2İstismar yokEPSS %0zimaspace · zimaos17 Eyl 2025
- CVE-2025-5843119İzleyin
ZimaOS reads arbitrary files using localhost calls to File API Download
OrtaCVSS 4,8İstismar yokEPSS %0zimaspace · zimaos17 Eyl 2025