tobychui zoraxy

• CVE-2026-108899 High 7.3 tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization 0.5%
• CVE-2026-100390 High 7.4 Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6 0.3%
• CVE-2026-33529 Low 3.3 Zoraxy: Authenticated Path Traversal in Config Import leads to RCE 0.4%
• CVE-2024-52010 High 8.6 Zoraxy has an authenticated command injection in the Web SSH feature 1.5%