tobychui
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 2
en
Verify to analyze this security profile
As of 10/20/2026, tobychui recorded 2 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, zoraxy had the most security vulnerabilities in the tobychui ecosystem, with 2 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-108899tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorizationCVE-2026-100390Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6CVE-2026-33529Zoraxy: Authenticated Path Traversal in Config Import leads to RCECVE-2024-52010Zoraxy has an authenticated command injection in the Web SSH feature| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-108899tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization | Exploitation statusActively exploited | FixYes | Affected productzoraxy | Published10/12/2026 | SeverityMedium |
CVE-2026-100390Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6 | Exploitation statusNot exploited | FixYes | Affected productzoraxy | Published | |
CVE-2026-33529Zoraxy: Authenticated Path Traversal in Config Import leads to RCE | Exploitation statusActively exploited | FixNo | Affected productzoraxy | Published | |
CVE-2024-52010Zoraxy has an authenticated command injection in the Web SSH feature | Exploitation statusNot exploited | FixNo | Affected productzoraxy | Published11/12/2024 |
4 Results | Page 1 of 1
| SeverityCritical |
| SeverityLow |
| SeverityHigh |