SUSE CVE-2026-25890

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's "Disallow" file path rules by modifying the request URL. By adding multiple slashe...

CVE-2026-25890

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's "Disallow" file path rules by modifying the request URL. By adding multiple slashe...

CVE-2026-25890

creationtimestamp| type| source ---|---|--- 2026-02-08 12:21:09+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-4mh3-h929-w968 2026-02-09 22:26:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehikouclz2m 2026-02-10...