Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunked endpoint but was not applied to the unauthenticated /api/uploadChunked/public endpoint in the same file (app/server/fireshare/api.py). An unauthenticated attacker can exploit the checkSum parameter to write arbitrary files with attacker-controlled content to any writable path on the server filesystem. This issue has been patched in version 1.5.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-02 | 2 | Patch2 |
| 2026-04-03 | 2 | Disclosure1General1 |
CVE-2026-34745 Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunked endpo… https://www.cve.org/CVERecord?id=CVE-2026-34745
Post summary
The excerpt merely cites CVE‑2026‑34745 and points to the CVE record without offering details on exploitation, patching, or technical specifics.
🔴 CVE-2026-34745 - Critical Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunked endpoint but was not appli... https://www.thehackerwire.com/vulnerability/CVE-2026-34745/ https://t.co/RFXWLr83La
Post summary
A brief announcement highlights a critical vulnerability, CVE‑2026‑34745, in the Fireshare media sharing platform, noting that a previous fix for a related CVE was applied before version 1.5.3 but providing limited contextual details.
[CVE-2026-34745: CRITICAL] Fireshare v1.5.3 patched a security vulnerability in unauthenticated /api/uploadChunked/public endpoint. Attackers could exploit the checkSum parameter to write files on the server.#cve,CVE-2026-34745,#cybersecurity https://cvefind.com/CVE-2026-34745
Post summary
Fireshare v1.5.3 released a patch for a critical CVE involving unauthenticated file uploads via a checksum parameter, preventing arbitrary file writes on the server.
🚨 CVE-2026-34745: Unauthenticated Path Traversal A... Devs patched the auth endpoint but forgot the public one - classic incomplete fix leaving unauthenticated RCE via check... https://zerodaysignal.com/vulnerability/CVE-2026-34745 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The advisory points out that an incomplete patch left a public endpoint vulnerable to unauthenticated RCE via path traversal, emphasizing the missing fix.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | shaneisrael | fireshare | - | - | - |