Critical severity9.8NVD Advisory· Published Mar 31, 2026· Updated Apr 3, 2026

CVE-2026-30286

Description

An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Funambol/Zefiro
cpe:2.3:a:funambol:zefiro:32.0.2026011614:*:*:*:*:*:*:*
Funambol/Zefiro Cloudllm-create
Range: =32.0.2026011614

Patches

Vulnerability mechanics

References

github.com/Secsys-FDU/AF_CVEs/issues/14nvdThird Party Advisory
play.google.com/store/apps/detailsnvdProduct
secsys.fudan.edu.cnnvdNot Applicable
zefiro.menvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000