PT-2026-29323 · Undefined · Undefined

Secsys-Fdu · Publicado 2026-03-31 · Atualizado 2026-03-31 · CVE-2026-30286

NVD

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-30286

Produtos afetados

Undefined

Referências · 5

• 🔥 https://github.com/Secsys-FDU/AF_CVEs/issues/14 · Exploit
• https://play.google.com/store/apps/details?id=com.funambol.zefiro · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-30286 · Nota de Segurança
• https://secsys.fudan.edu.cn · Nota
• https://zefiro.me · Nota