CVE ID :CVE-2026-121555 Published : Nov. 3, 2026, 4:17 p.m. | 47 minutes ago Description :Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-121555 - Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb

VERWANDTEARTIKEL

CVE-2026-28336 - SolarWinds Dameware Command Injection Vulnerability

CVE-2026-28335 - SolarWinds Dameware Buffer Overflow Vulnerability

CVE-2026-28327 - SolarWinds Dameware DLL Hijacking Vulnerability

CVE-2026-103916 - Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

CVE-2026-73328 - Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/

CVE-2026-121557 - WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot