Ffilebrowser

Products

Exploited and recent CVEs

• CVE-2026-90930 Medium 6.8 File Browser through 2.63.23 Path Traversal via Symlink Alias 0.5%
• CVE-2026-90929 High 8.1 File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup 0.4%
• CVE-2026-90928 Medium 6.5 File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint 0.4%
• CVE-2026-90927 Medium 6.5 filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message 0.4%
• CVE-2026-82238 Low 3.1 filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads 0.2%
• CVE-2026-82237 Low 3.1 filebrowser through 2.63.23 Stale Share Link via File Rename 0.2%
• CVE-2026-82236 Low 3.1 File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion 0.4%
• CVE-2026-82235 Medium 5.9 filebrowser through 2.63.23 Denial of Service via named pipes 0.5%
• CVE-2026-62684 Low 2.7 File Browser: Share API exposes the password hash and bypass token 0.4%
• CVE-2026-72838 Medium 6.5 FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload 0.5%
• CVE-2026-72837 High 8.8 File Browser before 2.63.20 Privilege Escalation via Proxy Authentication 0.6%
• CVE-2026-72836 High 8.1 FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass 0.5%
• CVE-2026-72835 Medium 6.8 filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization 0.5%
• CVE-2026-72834 Medium 4.3 filebrowser before 2.63.19 Permission Bypass via checksum 0.4%
• CVE-2026-72839 Critical 9.8 filebrowser through 2.63.16 Privilege Escalation via Signup 0.6%
• CVE-2026-73613 High 8.2 filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink 0.6%
• CVE-2026-73612 High 8.1 File Browser before v2.63.22 Authorization Bypass via Recursive Operations 0.5%
• CVE-2026-73611 Medium 6.8 File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass 0.4%
• CVE-2026-62685 High 8.1 File Browser: Colliding username normalization gives two users the same home directory 0.6%
• CVE-2026-62843 Medium 6.8 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip) 0.4%
• CVE-2026-62683 Low 3.1 File Browser: Trailing-slash delete leaves a stale public share behind 0.3%
• CVE-2026-61874 Low 3.1 filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete 0.3%
• CVE-2026-55668 Medium 6.3 File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope 0.4%
• CVE-2026-54090 High 8.7 File Browser: Command Allowlist Bypass via Shell Metacharacter Injection 0.4%
• CVE-2026-54088 Critical 9.3 File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) 0.8%
• CVE-2026-54089 Critical 9.1 File Browser: Authentication Bypass via Proxy Auth Header Forgery 0.6%
• CVE-2026-54091 High 7.5 File Browser: Incorrect access control in public directory shares via rule path rebasing 0.5%
• CVE-2026-54092 Medium 6.5 File Browser: DoS Vulnerability on Public Login API 0.5%
• CVE-2026-54097 High 7.2 File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix 0.4%
• CVE-2026-54093 Medium 6.8 File Browser: Path traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames 0.2%