CVE-2026-54337 — Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite

CVE-2026-54337

Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite PUBLISHED

Description (CNA)

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue.

Affected (CNA)

Vendor / product	Versions
ShaneIsrael / fireshare	affected < 1.6.14

CWE

CWE-88

References

https://github.com/ShaneIsrael/fireshare/security/advisories/GHSA-hmh2-6g84-q8jx

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.