Openziti

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 9
    Known Exploited: 0
    0
    Critical Level Threats
    5
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-45576

    zrok copy writes attacker-controlled WebDAV paths outside the destination root

    Last Modified: Jul 16, 2026
    Published: Jul 16, 2026

    CVE-2026-45568

    zrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

    Last Modified: Jul 17, 2026
    Published: Jul 16, 2026

    CVE-2026-58165

    OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation

    Last Modified: Jul 01, 2026
    Published: Jun 30, 2026

    CVE-2026-42275

    zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write

    Last Modified: May 08, 2026
    Published: May 08, 2026

    CVE-2026-40304

    zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records

    Last Modified: Apr 23, 2026
    Published: Apr 17, 2026
    Items Per Page