CVE-2026-54337
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 15, 2026
Vendor
unknown
Description
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue.