Tammersoft vulnerabilities and threats

CVE-2026-78269 is a Server-Side Request Forgery (SSRF) vulnerability affecting Tammersoft Shared Files versions up to 1.7.69. The vulnerability allows an attacker with low privileges to induce the server to make unauthorized requests. It has a medium severity with a CVSS score of 6.4. No patch or remediation information is currently provided.

CVE-2026-49112 is a high-severity unauthenticated path traversal vulnerability affecting Tammersoft Shared Files versions up to and including 1.7.64. This vulnerability allows an attacker to access files outside the intended directory by exploiting path traversal sequences such as '.../...//'. The vulnerability does not require authentication and impacts confidentiality without affecting integrity or availability.