agentprime: icewhaletech-zimaosEvery new CVE for icewhaletech-zimaos.https://agentprime.io/CVE-2026-28798: Arbitrary internal service access via /v1/sys/proxy when Cloudflare Tunnel is enabled on ZimaOShttps://agentprime.io/advisories/CVE-2026-28798/https://agentprime.io/advisories/CVE-2026-28798/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 20:00:48 GMTCVEcriticalCVE-2026-28442: ZimaOS: Arbitrary Deletion of Internal System Files via API Path Manipulationhttps://agentprime.io/advisories/CVE-2026-28442/https://agentprime.io/advisories/CVE-2026-28442/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 20:38:37 GMTCVECVE-2025-64427: ZimaOS is vulnerable to Server-Side Request Forgery (SSRF)https://agentprime.io/advisories/CVE-2025-64427/https://agentprime.io/advisories/CVE-2025-64427/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 16:28:42 GMTCVECVE-2026-28286: ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via APIhttps://agentprime.io/advisories/CVE-2026-28286/https://agentprime.io/advisories/CVE-2026-28286/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 16:28:39 GMTCVECVE-2026-21891: ZimaOS has Authentication Bypass via System-Level Usernamehttps://agentprime.io/advisories/CVE-2026-21891/https://agentprime.io/advisories/CVE-2026-21891/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 14:00:14 GMTCVEcriticalCVE-2025-58432: ZimaOS Privilege Escalation using localhost calls to File API Uploadhttps://agentprime.io/advisories/CVE-2025-58432/https://agentprime.io/advisories/CVE-2025-58432/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Sep 2025 17:31:20 GMTCVECVE-2025-58431: ZimaOS reads arbitrary files using localhost calls to File API Downloadhttps://agentprime.io/advisories/CVE-2025-58431/https://agentprime.io/advisories/CVE-2025-58431/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Sep 2025 17:25:08 GMTCVECVE-2024-49359: ZimaOS vulnerable to Directory Listing via Parameter Manipulationhttps://agentprime.io/advisories/CVE-2024-49359/https://agentprime.io/advisories/CVE-2024-49359/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Oct 2024 21:33:07 GMTCVECVE-2024-49358: ZimaOS vulnerable to Username Enumeration via API Responseshttps://agentprime.io/advisories/CVE-2024-49358/https://agentprime.io/advisories/CVE-2024-49358/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Oct 2024 21:25:57 GMTCVECVE-2024-49357: ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leakhttps://agentprime.io/advisories/CVE-2024-49357/https://agentprime.io/advisories/CVE-2024-49357/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Oct 2024 21:21:45 GMTCVEcriticalCVE-2024-48932: ZimaOS Unauthenticated API Discloses Usernameshttps://agentprime.io/advisories/CVE-2024-48932/https://agentprime.io/advisories/CVE-2024-48932/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Oct 2024 21:00:27 GMTCVECVE-2024-48931: ZimaOS Arbitrary File Read via Parameter Manipulationhttps://agentprime.io/advisories/CVE-2024-48931/https://agentprime.io/advisories/CVE-2024-48931/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Oct 2024 20:49:44 GMTCVE