openziti vulnerabilities
9 published CVEs name openziti among the affected products.
- 9Published CVEs9 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-45576
zrok copy writes attacker-controlled WebDAV paths outside the destination root
openziti · zrok
High8.3 - CVE-2026-45568
zrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths
openziti · zrok
Critical9.9 - CVE-2026-58165
OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation
openziti · ziti
High8.7 - CVE-2026-42275
zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write
openziti · zrok
High8.7 - CVE-2026-40304
zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records
openziti · zrok
Medium5.3 - CVE-2026-40303
zrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing
openziti · zrok
High7.5 - CVE-2026-40302
zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering
openziti · zrok
Medium6.1 - CVE-2025-27501
Server Side Request Forgery in Ziti Console
openziti · ziti-console
High8.6 - CVE-2025-27500
Cross Site Scripting potential in Ziti Console
openziti · ziti-console
High8.2