Is CVE-2025-46816 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2025-46816 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2025-46816

CVE-2026-50138 reveals that goshs --read-only, --upload-only, and --no-delete flags are silently ignored when WebDAV is enabled. Configuration theater in a tool used by developers and red teamers.

2025

What WebPulse reported · 1 analysis

goshs WebDAV Bypass: Access Control Flags That Never Controlled Access

CVE-2026-50138 reveals that goshs --read-only, --upload-only, and --no-delete flags are silently ignored when WebDAV is enabled. Configuration theater in a tool

July 2, 2026

View CVE-2025-46816 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2025-71338 CVE-2025-71336 CVE-2025-71327 CVE-2025-67644 CVE-2025-59532 CVE-2025-4322 CVE-2025-29927 CVE-2025-55182