Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerability in Fireshare’s chunked upload endpoint allows an attacker to write arbitrary files outside the intended upload directory. The `checkSum` multipart field is used directly in filesystem path construction without sanitization or containment checks. This enables unauthorized file writes to attacker-chosen paths writable by the Fireshare process (e.g., container `/tmp`), violating integrity and potentially enabling follow-on attacks depending on deployment. Version 1.5.2 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-26 | 1 | Disclosure1 |
| 2026-04-03 | 2 | General2 |
CVE-2026-34745 Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunked endpo… https://www.cve.org/CVERecord?id=CVE-2026-34745
Post summary
The text references CVE-2026-34745 in the context of Fireshare’s upload endpoint but provides no evidence of exploitation, patch, PoC, or technical details.
🔴 CVE-2026-34745 - Critical Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunked endpoint but was not appli... https://www.thehackerwire.com/vulnerability/CVE-2026-34745/ https://t.co/RFXWLr83La
Post summary
The tweet merely notes the existence of CVE-2026-34745 as critical with minimal detail, lacking any PoC, exploit, or patch information.
CVE-2026-33645 Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerability in Fireshare’s chunked upload endpoint allow… https://www.cve.org/CVERecord?id=CVE-2026-33645
Post summary
The tweet announces an authenticated path traversal vulnerability (CVE‑2026‑33645) affecting Fireshare v1.5.1, providing technical details but no PoC, exploit, patch, or active exploitation evidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | shaneisrael | fireshare | 1.5.1 | - | - |