CyberSecBulletin

ErugoOSS vulnerabilities

We track 1 vulnerability in ErugoOSS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 28, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest ErugoOSS vulnerabilities

  • 8.8 High severity

    Erugo: Unrestricted Upload of File with Dangerous Type

    CVE-2026-24897ErugoOSSEPSS 3.27%

    Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticated low-privileged user can upload arbitrary files to any specified location due to insufficient validation of user‑supplied paths when creating shares. By speci