Netdisk Fast Download
Approved changes feed: RSS · Atom
cpe:2.3:a:qaiu:netdisk-fast-download:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Qaiu (b0b0ef27-943f-56bd-b294-30b6fdb86f62) |
|---|---|
| Product | Netdisk Fast Download (1a91b7be-480d-5aa8-ac8f-48b8cba9c926) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111612 |
vulnerable | 2026-11-03 10:16:11.432967 |
netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth
HIGH (7.5)
netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords.
Published: 2026-10-16T17:38:51.828Z
Updated: 2026-10-16T19:27:08.464Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.