CVE Intelligence

AtalayaLabs vulnerabilities

🔔 Create alert RSS

Published CVEs affecting AtalayaLabs products: 1 record(s), with severity, exploitation and fixes.

OxiCloud 1

Exploited only (KEV) →

CVE-2026-111332 Low · 3.7 CWE-863 Oct 15, 2026
OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie
OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.