CVE-2026-28442 | IceWhaleTech ZimaOS 1.5.2-beta3 Application Interface path file inclusion (GHSA-q5hp-59wm-9xq3)

March 6, 2026 Yanac

A vulnerability categorized as critical has been discovered in IceWhaleTech ZimaOS 1.5.2-beta3. This affects an unknown function of the component Application Interface. Such manipulation of the argument path leads to file inclusion.

This vulnerability is referenced as CVE-2026-28442. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More