CVE-2022-40050: Zfile

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.

Affected products

• Zfile Zfile: version 4.1.1 only

Published 2022-09-26. Last modified 2026-06-17.