Kodbox CVE-2026-4831

While the CVSS 3.7 score is relatively low, the real-world risk is tempered but not negligible when considering all exploitation signals. The CVSS vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates a network-accessible vulnerability with HIGH attack complexity, requiring no privileges or user interaction, and resulting in only low confidentiality impact with no integrity or availability impact. The 'E:P' notation in the vector confirms public exploit availability. The vulnerability is not listed as actively exploited in CISA's Known Exploited Vulnerabilities (KEV) catalog, suggesting limited real-world exploitation despite POC availability. The high attack complexity and low impact rating suggest this requires specific technical knowledge or conditions to exploit successfully. Organizations using password-protected shares for sensitive but non-critical content face moderate risk; those relying on Kodbox for high-security document sharing should prioritize remediation. The lack of vendor response increases risk over time as no official patch timeline is established.

An attacker discovers a Kodbox 1.64 instance publicly exposed or accessible within an organization's network. They obtain the public proof-of-concept exploit from the referenced exploit repository (https://vulnplus-note.wetolink.com/share/xdk9igJ3sulk) and craft a targeted request to manipulate the authentication validation logic in the password-protected share handler. Due to the high attack complexity rating, the attacker requires specific knowledge of the target's Kodbox configuration and share naming conventions, but once successful, they gain unauthorized access to files within password-protected shares, bypassing the intended access controls. The confidentiality impact allows them to view and potentially exfiltrate sensitive documents from business-critical shares without possessing valid credentials.