Skip to main content

Vendor/product archive

zimaspace / zimaos CVEs

Beta · best-effort

12 CVEs tagged to zimaspace / zimaos2 Critical, 6 High, 4 Medium, 0 Low, 0 Unrated.

CVE-2026-28798

Published Apr 3, 2026

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. Prior to version 1.5.3, a proxy endpoint (/v1/sys/proxy) exposed by ZimaOS's web int…

CVSS 9.0 · Critical
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-28442

Published Mar 5, 2026

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, users are restricted from deleting internal system files or…

CVSS 8.5 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2026-28286

Published Mar 2, 2026

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, the application enforces restrictions in the frontend/UI to…

CVSS 8.5 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2025-64427

Published Mar 2, 2026

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.0 and prior, due to insufficient validation or restriction of target…

CVSS 7.1 · High
Vendor/product tagsBeta · best-effort

CVE-2026-21891

Published Jan 8, 2026

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions up to and including 1.5.0, the application checks the validity of the us…

CVSS 9.4 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2025-58432

Published Sep 17, 2025

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and all prior versions, the /v2_1/files/file/uploadV2 endpoint allo…

CVSS 5.2 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-58431

Published Sep 17, 2025

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and earlier, the /v2_1/files/file/download endpoint allows file rea…

CVSS 4.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-49359

Published Oct 24, 2024

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoint `http://<Zima_Server_IP:PO…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2024-49358

Published Oct 24, 2024

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoint `http://<Server-IP>/v1/use…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-49357

Published Oct 24, 2024

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as `http:…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2024-48932

Published Oct 24, 2024

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions below 1.5.0, the API endpoint `http://<Server-ip>/v1/users/name` allows…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-48931

Published Oct 24, 2024

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint `http://<Zima_Serve…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-12 of 12 CVEsPage 1 of 1