Vulnerabilidades de Qaiu

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Qaiu: 1 registro(s), com severidade, exploração e correções.

Netdisk-fast-download 1

Somente exploradas (KEV) →

CVE-2026-111612 Alta · 7.5 CWE-321 16/10/2026

netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth

netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords.