Zimaspace
5 CVEs tracked since 2024. Since Oct 2024, none of them reached CISA KEV.
Zimaspace CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2024-10 | 5 | 0 |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Zimaspace's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 11 most recently published vulnerabilities affecting Zimaspace.
- CVE-2026-28798Arbitrary internal service access via /v1/sys/proxy when Cloudflare Tunnel is enabled on ZimaOS9.0
- CVE-2025-64427ZimaOS is vulnerable to Server-Side Request Forgery (SSRF)7.1
- CVE-2026-28286ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API8.5
- CVE-2026-21891ZimaOS has Authentication Bypass via System-Level Username9.4
- CVE-2025-58432ZimaOS Privilege Escalation using localhost calls to File API Upload7.8
- CVE-2025-58431ZimaOS reads arbitrary files using localhost calls to File API Download6.2
- CVE-2024-49359ZimaOS vulnerable to Directory Listing via Parameter Manipulation7.5
- CVE-2024-49358ZimaOS vulnerable to Username Enumeration via API Responses5.3
- CVE-2024-49357ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leak7.5
- CVE-2024-48932ZimaOS Unauthenticated API Discloses Usernames5.3
- CVE-2024-48931ZimaOS Arbitrary File Read via Parameter Manipulation7.5
The record
- Peak rank
- #165 in Oct 2024
- Busiest month shown
- Oct 2024, 5 CVEs
- Months with a KEV entry
- 0 since Oct 2024
- Monthly snapshots
- 1 since 2024