CVE-2026-54337 — Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/ov…
Published: 2026-09-15 · CVSS: 9.8 · CVSS 3.1
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7