Skip to content
Ttobychui
Products
| Product | CVEs | Exploited | Latest |
|---|
| zoraxy | 4 | – | Oct 12, 2026 |
Exploited and recent CVEs
-
CVE-2026-108899
High 7.3
tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization
0.5%
-
CVE-2026-100390
High 7.4
Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6
0.3%
-
CVE-2026-33529
Low 3.3
Zoraxy: Authenticated Path Traversal in Config Import leads to RCE
0.4%
-
CVE-2024-52010
High 8.6
Zoraxy has an authenticated command injection in the Web SSH feature
1.5%