Ggtsteffaniak

Products

Exploited and recent CVEs

• CVE-2026-116682 High 8.6 FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory 0.5%
• CVE-2026-54910 High 7.7 FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files 0.4%
• CVE-2026-54685 Medium 5.3 FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel 0.3%
• CVE-2026-46410 High 8.7 FileBrowser Quantum: unauthenticated user share share info 0.4%
• CVE-2026-48777 Critical 9.3 FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory 0.5%
• CVE-2026-44542 Critical 9.1 FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion 0.5%
• CVE-2026-30934 High 8.9 FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) 0.4%
• CVE-2026-30933 High 7.5 FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info 0.6%
• CVE-2026-27611 High 7.1 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links 0.4%