CVE-2026-30285 in Zora Post, Trade, Earn Crypto
Summary
An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.
Responsible
MITRE
Reservation
03/04/2026
Disclosure
03/31/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354492 | Zora Post, Trade, Earn Crypto File Import privilege escalation | Not defined | Not defined | CVE-2026-30285 |