Linux Distros Unpatched Vulnerability : CVE-2026-72204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter...

PT-2026-72565

In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of AS RELEASE ALWAYS for symlinks and mountpoints Regular AFS files correctly use afs file aops which have release folio set as netfs release folio, so AS RELEASE ALWAYS is valid for them when fscache is enabl...

PT-2026-73023

In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree root triggers a NULL pointer dereference: BUG: kernel NULL pointer dereference, address:...

K000162928: Node.JS vulnerability CVE-2026-58043

Security Advisory Description A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended...

CVE-2026-72836

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem confirmed on Windows/NTFS, two self-registered usernam...

CVE-2026-72836 FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem confirmed on Windows/NTFS, two self-registered usernam...

EUVD-2026-58650

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem confirmed on Windows/NTFS, two self-registered usernam...

CVE-2026-72836

Affected: FileBrowser before 2.63.19. Root on a case-insensitive filesystem (e.g., Windows/NTFS) allows two self-registered usernames that differ only by case to resolve to the same home directory, because the scope-ownership check uses an exact case-sensitive comparison. This enables an attacker...

CVE-2026-72836 FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem confirmed on Windows/NTFS, two self-registered usernam...

CVE-2026-72836

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem confirmed on Windows/NTFS, two self-registered usernam...

CVE-2026-72835

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...

GO-2024-2617 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3793 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-5415 vulnerabilities

Vulnerabilities for packages: minio...

GO-2026-4896 vulnerabilities

Vulnerabilities for packages: minio...

GO-2022-0368 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2026-4806 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2026-5607 vulnerabilities

Vulnerabilities for packages: goreleaser...

GO-2025-4181 vulnerabilities

Vulnerabilities for packages: caddy...

PT-2026-72005

Name of the Vulnerable Software and Affected Versions FileBrowser versions prior to 2.63.19 Description An issue exists when the software is hosted on a case-insensitive filesystem, such as Windows/NTFS, and both Signup and CreateUserDir are enabled. The system fails to account for...