icewhaletech Zimaos Vulnerabilities

Icewhaletech Zimaos vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

8 January 2026

Authentication Bypass Vulnerability in ZimaOS by IceWhaleTech
CVE-2026-21891
IcewhaletechZimaos9.4CRITICAL

17 September 2025

File Upload Vulnerability in ZimaOS Affects Root Access
CVE-2025-58432
IcewhaletechZimaos5.2MEDIUM
File Access Vulnerability in ZimaOS Affecting Localhost Users
CVE-2025-58431
IcewhaletechZimaos4.8MEDIUM

24 October 2024

Sensitive Data Exposure in ZimaOS API Endpoints Affecting Zima Devices
CVE-2024-49357
IcewhaletechZimaos7.5HIGH
ZimaOS Vulnerability Allows Username Enumeration
CVE-2024-49358
IcewhaletechZimaos5.3MEDIUM
ZimaOS Vulnerable to Directory Traversal Attack
CVE-2024-49359
IcewhaletechZimaos7.5HIGH
ZimaOS Arbitrary File Read via Parameter Manipulation
CVE-2024-48931
IcewhaletechZimaos7.5HIGH
ZimaOS Unauthenticated API Discloses Usernames
CVE-2024-48932
IcewhaletechZimaos5.3MEDIUM