CVE-2026-30933

🗓️ 10 Mar 2026 16:10:56Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 24 Views

FileBrowser Quantum incomplete remediation exposes tokenized downloadURL on protected shares.

Reporter	Title	Published	Views	Family All 231
ATTACKERKB	CVE-2026-27611	25 Feb 202602:24	–	attackerkb
Circl	CVE-2026-27611	21 Feb 202616:35	–	circl
Circl	CVE-2026-30933	7 Mar 202612:58	–	circl
CNNVD	FileBrowser 安全漏洞	25 Feb 202600:00	–	cnnvd
CNNVD	FileBrowser Quantum 安全漏洞	10 Mar 202600:00	–	cnnvd
CVE	CVE-2026-27611	25 Feb 202602:24	–	cve
Cvelist	CVE-2026-27611 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links	25 Feb 202602:24	–	cvelist
Cvelist	CVE-2026-30933 FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info	10 Mar 202616:10	–	cvelist
EUVD	EUVD-2026-10544	10 Mar 202616:10	–	euvd
EUVD	EUVD-2026-8594	25 Feb 202616:00	–	euvd

NVD

Vulners

Node

filebrowser filebrowserRange≤1.2.9

filebrowser filebrowserMatch1.2.1stable

filebrowser filebrowserMatch1.3.0beta

[
  {
    "vendor": "gtsteffaniak",
    "product": "filebrowser",
    "versions": [
      {
        "version": ">= 1.3.0-beta, < 1.3.1-beta",
        "status": "affected"
      },
      {
        "version": ">= 1.2.6-beta, < 1.2.2-stable",
        "status": "affected"
      },
      {
        "version": "= 1.1.3-stable",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/gtsteffaniak/filebrowser/releases/tag/v1.3.1-beta
github	www.github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-525j-95gf-766f
github	www.github.com/gtsteffaniak/filebrowser/releases/tag/v1.2.2-stable

17 Jun 2026 10:33Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.5

EPSS0.00544

SSVC

CVE-2026-30933 FileBrowser Quantum tokenized downloadURL password protected shares public api share incomplete remediation