Server (Sync-in) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2026-09-21. Vendor: Sync-in.

CVEs of Server

• CVE-2026-58272 - CVSS 5.3 (medium), 2026-09-21: Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Versions prior to 2.4.1 contain an observable timing…
• CVE-2026-58270 - CVSS 6.5 (medium), 2026-09-21: Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, the sync diff endpoint compiles a…
• CVE-2026-58269 - CVSS 8.1 (high), 2026-09-21: Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POST /api/auth/token` authenticates…
• CVE-2026-58271 - CVSS 6.8 (medium), 2026-09-21: Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POST /api/app/sync/register` accepts…
• CVE-2026-47684 - CVSS 7.7 (high), 2026-06-16: Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.3.0, the private IP blocklist regex…
• CVE-2026-41161 - CVSS 6.9 (medium), 2026-05-08: Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint…