Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-25742

Zulip is an open-source team collaboration tool. Prior to version 11.6, Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, even after spectator access (enable_spectator_access / WEB_PUBLIC_STREAMS_ENABLED) is disabled, attachments originating from web-public streams can still be retrieved anonymously. As a result, file contents remain accessible even after public access is intended to be disabled. Similarly, even after spectator access is disabled, the /users/me/<stream_id>/topics endpoint remains reachable anonymously, allowing retrieval of topic history for web-public streams. This issue has been patched in version 11.6. This issue has been patched in version 11.6.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.6%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-25742
  • Zulip » Zulip » Version: 1.4.0
    cpe:2.3:a:zulip:zulip:1.4.0
  • Zulip » Zulip » Version: 1.4.1
    cpe:2.3:a:zulip:zulip:1.4.1
  • Zulip » Zulip » Version: 1.4.2
    cpe:2.3:a:zulip:zulip:1.4.2
  • Zulip » Zulip » Version: 1.4.3
    cpe:2.3:a:zulip:zulip:1.4.3
  • Zulip » Zulip » Version: 1.5.0
    cpe:2.3:a:zulip:zulip:1.5.0
  • Zulip » Zulip » Version: 1.5.1
    cpe:2.3:a:zulip:zulip:1.5.1
  • Zulip » Zulip » Version: 1.5.2
    cpe:2.3:a:zulip:zulip:1.5.2
  • Zulip » Zulip » Version: 1.6.0
    cpe:2.3:a:zulip:zulip:1.6.0
  • Zulip » Zulip » Version: 1.7.0
    cpe:2.3:a:zulip:zulip:1.7.0
  • Zulip » Zulip » Version: 1.7.1
    cpe:2.3:a:zulip:zulip:1.7.1
  • Zulip » Zulip » Version: 1.7.2
    cpe:2.3:a:zulip:zulip:1.7.2
  • Zulip » Zulip » Version: 1.8.0
    cpe:2.3:a:zulip:zulip:1.8.0
  • Zulip » Zulip » Version: 1.8.1
    cpe:2.3:a:zulip:zulip:1.8.1
  • Zulip » Zulip » Version: 1.9.0
    cpe:2.3:a:zulip:zulip:1.9.0
  • Zulip » Zulip » Version: 1.9.1
    cpe:2.3:a:zulip:zulip:1.9.1
  • Zulip » Zulip » Version: 1.9.2
    cpe:2.3:a:zulip:zulip:1.9.2
  • Zulip » Zulip » Version: 10.1.70
    cpe:2.3:a:zulip:zulip:10.1.70
  • Zulip » Zulip » Version: 11.1.73
    cpe:2.3:a:zulip:zulip:11.1.73
  • Zulip » Zulip » Version: 11.3.74
    cpe:2.3:a:zulip:zulip:11.3.74
  • Zulip » Zulip » Version: 11.4.75
    cpe:2.3:a:zulip:zulip:11.4.75
  • Zulip » Zulip » Version: 11.5.76
    cpe:2.3:a:zulip:zulip:11.5.76
  • Zulip » Zulip » Version: 2.0.0
    cpe:2.3:a:zulip:zulip:2.0.0
  • Zulip » Zulip » Version: 2.0.1
    cpe:2.3:a:zulip:zulip:2.0.1
  • Zulip » Zulip » Version: 2.0.2
    cpe:2.3:a:zulip:zulip:2.0.2
  • Zulip » Zulip » Version: 2.0.3
    cpe:2.3:a:zulip:zulip:2.0.3
  • Zulip » Zulip » Version: 2.0.4
    cpe:2.3:a:zulip:zulip:2.0.4
  • Zulip » Zulip » Version: 2.0.5
    cpe:2.3:a:zulip:zulip:2.0.5
  • Zulip » Zulip » Version: 2.0.6
    cpe:2.3:a:zulip:zulip:2.0.6
  • Zulip » Zulip » Version: 2.0.7
    cpe:2.3:a:zulip:zulip:2.0.7
  • Zulip » Zulip » Version: 2.0.8
    cpe:2.3:a:zulip:zulip:2.0.8
  • Zulip » Zulip » Version: 2.1.0
    cpe:2.3:a:zulip:zulip:2.1.0
  • Zulip » Zulip » Version: 2.1.1
    cpe:2.3:a:zulip:zulip:2.1.1
  • Zulip » Zulip » Version: 2.1.2
    cpe:2.3:a:zulip:zulip:2.1.2
  • Zulip » Zulip » Version: 2.1.3
    cpe:2.3:a:zulip:zulip:2.1.3
  • Zulip » Zulip » Version: 2.1.33
    cpe:2.3:a:zulip:zulip:2.1.33
  • Zulip » Zulip » Version: 2.1.4
    cpe:2.3:a:zulip:zulip:2.1.4
  • Zulip » Zulip » Version: 2.1.5
    cpe:2.3:a:zulip:zulip:2.1.5
  • Zulip » Zulip » Version: 2.1.6
    cpe:2.3:a:zulip:zulip:2.1.6
  • Zulip » Zulip » Version: 2.1.7
    cpe:2.3:a:zulip:zulip:2.1.7
  • Zulip » Zulip » Version: 2.1.8
    cpe:2.3:a:zulip:zulip:2.1.8
  • Zulip » Zulip » Version: 2.2
    cpe:2.3:a:zulip:zulip:2.2
  • Zulip » Zulip » Version: 2.3.35
    cpe:2.3:a:zulip:zulip:2.3.35
  • Zulip » Zulip » Version: 2.7.39
    cpe:2.3:a:zulip:zulip:2.7.39
  • Zulip » Zulip » Version: 3.0
    cpe:2.3:a:zulip:zulip:3.0
  • Zulip » Zulip » Version: 3.0.40
    cpe:2.3:a:zulip:zulip:3.0.40
  • Zulip » Zulip » Version: 3.1
    cpe:2.3:a:zulip:zulip:3.1
  • Zulip » Zulip » Version: 3.1.41
    cpe:2.3:a:zulip:zulip:3.1.41
  • Zulip » Zulip » Version: 3.2
    cpe:2.3:a:zulip:zulip:3.2
  • Zulip » Zulip » Version: 3.2.42
    cpe:2.3:a:zulip:zulip:3.2.42
  • Zulip » Zulip » Version: 3.3
    cpe:2.3:a:zulip:zulip:3.3
  • Zulip » Zulip » Version: 3.3.43
    cpe:2.3:a:zulip:zulip:3.3.43
  • Zulip » Zulip » Version: 3.4
    cpe:2.3:a:zulip:zulip:3.4
  • Zulip » Zulip » Version: 4.0
    cpe:2.3:a:zulip:zulip:4.0
  • Zulip » Zulip » Version: 4.1
    cpe:2.3:a:zulip:zulip:4.1
  • Zulip » Zulip » Version: 4.10
    cpe:2.3:a:zulip:zulip:4.10
  • Zulip » Zulip » Version: 4.11
    cpe:2.3:a:zulip:zulip:4.11
  • Zulip » Zulip » Version: 4.2
    cpe:2.3:a:zulip:zulip:4.2
  • Zulip » Zulip » Version: 4.3
    cpe:2.3:a:zulip:zulip:4.3
  • Zulip » Zulip » Version: 4.4
    cpe:2.3:a:zulip:zulip:4.4
  • Zulip » Zulip » Version: 4.5
    cpe:2.3:a:zulip:zulip:4.5
  • Zulip » Zulip » Version: 4.6
    cpe:2.3:a:zulip:zulip:4.6
  • Zulip » Zulip » Version: 4.7
    cpe:2.3:a:zulip:zulip:4.7
  • Zulip » Zulip » Version: 4.8
    cpe:2.3:a:zulip:zulip:4.8
  • Zulip » Zulip » Version: 4.9
    cpe:2.3:a:zulip:zulip:4.9
  • Zulip » Zulip » Version: 5.0
    cpe:2.3:a:zulip:zulip:5.0
  • Zulip » Zulip » Version: 5.0.46
    cpe:2.3:a:zulip:zulip:5.0.46
  • Zulip » Zulip » Version: 5.1
    cpe:2.3:a:zulip:zulip:5.1
  • Zulip » Zulip » Version: 5.2
    cpe:2.3:a:zulip:zulip:5.2
  • Zulip » Zulip » Version: 5.3
    cpe:2.3:a:zulip:zulip:5.3
  • Zulip » Zulip » Version: 5.4
    cpe:2.3:a:zulip:zulip:5.4
  • Zulip » Zulip » Version: 5.5
    cpe:2.3:a:zulip:zulip:5.5
  • Zulip » Zulip » Version: 5.6
    cpe:2.3:a:zulip:zulip:5.6
  • Zulip » Zulip » Version: 6.2
    cpe:2.3:a:zulip:zulip:6.2
  • Zulip » Zulip » Version: 6.6.53
    cpe:2.3:a:zulip:zulip:6.6.53
  • Zulip » Zulip » Version: 7.0.54
    cpe:2.3:a:zulip:zulip:7.0.54
  • Zulip » Zulip » Version: 7.1.55
    cpe:2.3:a:zulip:zulip:7.1.55
  • Zulip » Zulip » Version: 7.3.57
    cpe:2.3:a:zulip:zulip:7.3.57
  • Zulip » Zulip » Version: 8.1.62
    cpe:2.3:a:zulip:zulip:8.1.62
  • Zulip » Zulip » Version: 8.2.63
    cpe:2.3:a:zulip:zulip:8.2.63
  • Zulip » Zulip » Version: 8.3.64
    cpe:2.3:a:zulip:zulip:8.3.64
  • Zulip » Zulip » Version: 9.1.67
    cpe:2.3:a:zulip:zulip:9.1.67


Products
Pricing
Contact Us

Shodan ® - All rights reserved