CVE-2026-33645

creationtimestamp| type| source ---|---|--- 2026-03-26 23:19:48+00:00| seen| Telegram/lYHJ2uqEkk9SWNnUth8Z9R1ezNKbfqND5wGUosjkyCOBSr0 2026-03-31 06:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3midir6ogjx2v 2026-04-02 20:06:08+00:00| seen|...

CVE-2026-33645 Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`

Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerability in Fireshare’s chunked upload endpoint allows an attacker to write arbitrary files outside the intended upload directory. The checkSum multipart field is used directly in...