399 matches found
GO-2026-5481 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2024-2698 vulnerabilities
Vulnerabilities for packages: nuclei, filebrowser, kubescape, wolfictl, zarf, kots, terragrunt, k9s...
GO-2025-3790 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2026-4344 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2025-3922 vulnerabilities
Vulnerabilities for packages: trufflehog, gitness, gitleaks, steampipe, terraform, trivy, nuclei, undock, grafana-alloy, kubescape-operator, rancher-fleet, zarf, terragrunt, k9s, filebrowser, podman, tflint, vcluster, gptscript, guac, opentofu, envoy-gateway, xeol, trivy-operator, zot, nsc...
GO-2025-3792 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2025-3811 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2025-3605 vulnerabilities
Vulnerabilities for packages: kots, filebrowser...
GO-2025-3793 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: nuclei, filebrowser, chezmoi, grype, kubescape, wolfictl, trufflehog, syft, zarf, gitleaks, gptscript, kots, undock, k9s...
PT-2026-72005
Name of the Vulnerable Software and Affected Versions FileBrowser versions prior to 2.63.19 Description An issue exists when the software is hosted on a case-insensitive filesystem, such as Windows/NTFS, and both Signup and CreateUserDir are enabled. The system fails to account for...
CVE-2026-72839
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions...
CVE-2026-72839
CVE-2026-72839 affects filebrowser up to version 2.63.16, where self-signup with default CreateUserDir permits accounts to inherit the server root scope with full create, modify, delete, rename, share, and download permissions. This unauthenticated access can reach all files, yielding high confid...
CVE-2026-72839 filebrowser through 2.63.16 Privilege Escalation via Signup
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions...
CVE-2026-72839 filebrowser through 2.63.16 Privilege Escalation via Signup
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions...
CVE-2026-73613
filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope. Attackers can swap an ancestor directory with a symlink...
CVE-2026-73613 filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink
filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope. Attackers can swap an ancestor directory with a symlink...
EUVD-2026-57817
filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope. Attackers can swap an ancestor directory with a symlink...
CVE-2026-73613 filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink
filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope. Attackers can swap an ancestor directory with a symlink...