Products: 1
Vulnerabilities: 4
Known Exploited: 0
0
Critical Level Threats
2
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-42275
zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write
Last Modified: May 08, 2026
Published: May 08, 2026
CVE-2026-40304
zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records
Last Modified: Apr 23, 2026
Published: Apr 17, 2026
CVE-2026-40303
zrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing
Last Modified: Apr 23, 2026
Published: Apr 17, 2026
CVE-2026-40302
zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering
Last Modified: Apr 23, 2026
Published: Apr 17, 2026
Items Per Page
