Netfoundry

6 CVEs across 1 Netfoundry products. Browse Netfoundry vulnerabilities, severities, and proof-of-concept exploits.

Netfoundry products with known CVEs

ProductCVEs
Zrok6
Netfoundry CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45576High7.52026-07-16zrok is software for sharing web services, files, and network resources. From 0.4.23 until 2.0.3, `zrok2 copy` stores attacker-controlled WebDAV or zrok drive…
CVE-2026-45568Critical9.12026-07-16zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts an absolute URL…
CVE-2026-42275High8.72026-05-08zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path t…
CVE-2026-40304Medium5.32026-04-17zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the unaccess handler (controller/unaccess.go) contains a logic…
CVE-2026-40303High7.52026-04-17zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, endpoints.GetSessionCookie parses an attacker-supplied cookie…
CVE-2026-40302Medium6.12026-04-17zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the proxyUi template engine uses Go's text/template (which per…