CVE-2026-104106

FileRise , a self-hosted web-based file manager, is vulnerable to a security flaw prior to version 3.23.0 due to a lack of step-up re-authentication for 2FA management. An attacker controlling an existing authenticated session with a valid CSRF token can disable TOTP without recent reauthenticati...