Vulnerabilidades de Funambol
CVEs publicadas que afetam produtos de Funambol: 2 registro(s), com severidade, exploração e correções.
CVE-2026-30286
Crítica · 9.8
CWE-22 31/03/2026
Path Traversal em Funambol Zefiro
An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.
CVE-2025-41351
Média · 6.0
CWE-649 28/01/2026
Weak encryption on Funambol's cloud server
Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decrypt and encrypt the parameters used by the application to generate ‘self-signed’ access URLs.