Is CVE-2026-34581 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-34581 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-34581 — Security Advisory

CVE-2026-50138 reveals that goshs --read-only, --upload-only, and --no-delete flags are silently ignored when WebDAV is enabled. Configuration theater in a tool used by developers and red teamers.

CVSS 8.1 2026

What WebPulse reported · 1 analysis

goshs WebDAV Bug: Access Controls That Never Worked

CVE-2026-50138 reveals that goshs --read-only, --upload-only, and --no-delete flags are silently ignored when WebDAV is enabled. Configuration theater in a tool

July 2, 2026

View CVE-2026-34581 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-60137 CVE-2026-63030 CVE-2026-50549 CVE-2026-50548 CVE-2026-9082 CVE-2026-49160 CVE-2026-48019 CVE-2026-39861