Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2026/06/15 9:30 p.m.•19 views

Filestash allows attackers to escalate privileges via sending a crafted request

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request...

8.1CVSS5.5AI score0.0035EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2026/06/15 8:16 p.m.•32 views

CVE-2026-50891

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request...

8.1CVSS0.0035EPSS
SaveExploits0References1
Mend
Mend
•added 2026/06/15 12:00 a.m.•9 views

CVE-2026-50891

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request...

8.6CVSS5.5AI score0.0035EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•47 views

PT-2026-49332

Name of the Vulnerable Software and Affected Versions Filestash version 0.4.0 Description Incorrect access control in the '/admin/api/config' endpoint allows attackers to escalate privileges by sending a crafted request. Recommendations At the moment, there is no information about a newer version...

10CVSS6AI score0.05299EPSS
SaveExploits9References192
CVE
CVE
•added 2026/06/15 12:00 a.m.•77 views

CVE-2026-50891

Filestash v0.4.0 is affected by an incorrect access control vulnerability in its /admin/api/config component. An attacker can exploit this flaw by sending a crafted request to escalate privileges . While specific exploitation links or remediation versions are not provided in the documents, the vu...

8.1CVSS5.5AI score0.0035EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•5 views

CVE-2026-50891: Improper Access Control

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request...

8.1CVSS5.5AI score0.0035EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/15 12:00 a.m.•17 views

CVE-2026-50891

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request...

5.5AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/15 12:00 a.m.•45 views

CVE-2026-50891

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request...

0.0035EPSS
SaveExploits0References1
Rows per page
Query Builder