Home-Server โ€” PoC Archivehttps://poc.intelseclab.com/tags/home-server/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000ZimaOS Arbitrary File Write via Unvalidated File API Path โ€” CVE-2026-28286https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28286-zimaos-arbitrary-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28286-zimaos-arbitrary-file-write/Critical severity โ€” web ยท CVE-2026-28286. Status: PoC. Affects: ZimaOS (NAS / home-server operating system), file API endpoint /v2_1/files/file. Tags: zimaos, nas, arbitrary-file-write, path-traversal, api-misconfiguration, rce, home-server.webCriticalzimaosnasarbitrary-file-writepath-traversalapi-misconfigurationrcehome-server