THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-55499 (MEDIUM 4.3) — Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, path

[NVD] CVE-2026-55499 (MEDIUM 4.3) — Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, path

mednvdPublished 2026-07-31

CVE-2026-55499 CVSS: 4.3 MEDIUM Published: 2026-07-31T04:17:23.380

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets, event types, and hashed identifie

Indicators of compromise

CVE-2026-55499cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-55499