CVE-2026-69193

Prior to version 3.21.0 , the self-hosted web-based file manager FileRise is vulnerable to a rate limiting bypass. The root cause lies in the AuthModel::getFailedLoginKey() function, which tracks failed login attempts based solely on the combination of source IP address and username. A remote una...