CVE-2026-21891 | IceWhaleTech ZimaOS up to 1.5.0 Login improper authentication (GHSA-xj93-qw9p-jxq4)

January 8, 2026 Yanac

A vulnerability identified as critical has been detected in IceWhaleTech ZimaOS up to 1.5.0. This affects an unknown part of the component Login. This manipulation causes improper authentication.

This vulnerability is handled as CVE-2026-21891. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More