tag

Home-Server

ZimaOS Arbitrary File Write via Unvalidated File API Path — CVE-2026-28286

CVE-2026-28286· ZimaOS (NAS / home-server operating system), file API endpoint /v2_1/files/file unpatched