https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 11:01:13 +0000 https://db.gcve.eu/vuln/cve-2026-111332 <p><strong>Affected:</strong> AtalayaLabs OxiCloud</p> <p>OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.</p> <p><strong>Affected:</strong> AtalayaLabs OxiCloud</p> <p>OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.</p> https://db.gcve.eu/vuln/cve-2026-111332