Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-54337

Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite

Description

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ShaneIsrael fireshare

  • < 1.6.14affected

References