PoC Archive PoC Archive

tag

Zimaos

Critical
ZimaOS Arbitrary File Write via Unvalidated File API Path — CVE-2026-28286
CVE-2026-28286· ZimaOS (NAS / home-server operating system), file API endpoint /v2_1/files/file unpatched