CVE-2026-101056

4 advisories.

Go/github.com/cloudreve/Cloudreve/v4 CVE-2026-101056: medium 5.3

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	4.0.0-20260606032813-26b6b1044b02

Fixed versions

No fixed version in the source.

Sources

CVE-2026-101056 · published 2026-08-24T22:01:03Z · modified 2026-09-28T03:55:38.183380212Z · JSON

Go/github.com/cloudreve/Cloudreve CVE-2026-101056: unknown

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-101056 · published 2026-08-25T19:43:10Z · modified 2026-09-28T03:55:38.183380212Z · JSON

Go/github.com/cloudreve/Cloudreve/v3 CVE-2026-101056: unknown

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-101056 · published 2026-08-25T19:43:10Z · modified 2026-09-28T03:55:38.183380212Z · JSON

Go/github.com/cloudreve/Cloudreve/v4 CVE-2026-101056: unknown

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-101056 · published 2026-08-25T19:43:10Z · modified 2026-09-28T03:55:38.183380212Z · JSON