CPE

Cpe:2.3:a:postiz:postiz::::::::

1 brief RSS

Postiz: Arbitrary file read via crafted media path (CVE-2026-115932)

Postiz fails to validate media paths during post creation, allowing users to read arbitrary files from the server disk and exfiltrate them via Discord attachments.

PoC postiz-app +1 authentication-bypass web-application cloud

1t 2c updated 14m ago

Cpe:2.3:a:postiz:postiz:*:*:*:*:*:*:*:*

Postiz: Arbitrary file read via crafted media path (CVE-2026-115932)

Cpe:2.3:a:postiz:postiz::::::::