CyberSecBulletin

DrizzleTime vulnerabilities

We track 1 vulnerability in DrizzleTime products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest DrizzleTime vulnerabilities

  • 7.5 High severity

    Foxel: Missing Authentication for Critical Functionality

    CVE-2026-121555DrizzleTime

    Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply a VFS mount prefix and relative path to retrieve full fil