CVE-2026-30286
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Funambol Zefiro Cloud version v32.0.2026011614 contains an arbitrary file overwrite vulnerability during the file import process. An attacker can overwrite critical internal files, potentially leading to arbitrary code execution or information exposure.
Risk Assessment
An attacker could gain control of the system by overwriting critical files, potentially resulting in arbitrary code execution or leakage of sensitive data.
Recommendation
Contact the vendor for an update or apply workarounds to secure the file import process.
Original NVD description (English source)
An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.