Zdir vulnerabilities
We track 2 vulnerabilities in Zdir products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 3, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Zdir vulnerabilities
- 9.1 Critical severity
Zdir: Out-of-bounds Write
A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /api/extract, files may be written outside the intended directory, leading to arbitrary file overwrite and potentially re
- 8.8 High severity
Zdir: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.