AtalayaLabs CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM AtalayaLabs CVE published 2026-10-15

CVE-2026-111332

CVE-2026-111332 is an incorrect authorization vulnerability in OxiCloud versions 0.9.1 through 0.9.3. Attackers with an existing share-ring cookie can access shared files or folders even after a password is added. This vulnerability allows unauthorized access to shared resources, potentially leading to data breaches or further exploitation. Defenders should assess exposure and prioritize updates to preven [truncated]