CVE-2026-72838

CVE-2026-72838 affects FileBrowser versions before 2.63.19. The root cause is that the TUS resumable-upload PATCH endpoint fails to enforce the declared Upload-Length, enabling authenticated users to write arbitrary data to disk. This can allow an attacker to send oversized request bodies that ex...