Tobychui Zoraxy
3 CVEs affecting Tobychui Zoraxy. Latest disclosed: 2026-09-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100390 | High | 7.4 | 2026-09-25 | Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers con… |
CVE-2026-33529 | Low | 3.3 | 2026-03-26 | Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. Prior to version 3.3.2, an authenticated path traversal vulnerability in the configuration… |
CVE-2024-52010 | | 2024-11-12 | Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker t… |