EUVD-2026-57207

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on...

CVE-2026-54719

The CVE-2026-54719 vulnerability affects goshs, a single-binary file server. Before version 2.1.1, the httpserver/updown.go bulkDownload handler invoked via the ?bulk and file= ZIP downloads could bypass ACL checks (findEffectiveACL / applyCustomAuth), permitting unauthenticated reads of files pr...

PT-2025-42793

Name of the Vulnerable Software and Affected Versions FileRise versions prior to 1.5.0 Description FileRise is a self-hosted web-based file manager offering multi-file upload, editing, and batch operations. A regression in version 1.4.0 permitted the inference of folder visibility and ownership...

TeamPass does not properly check whether a folder is in a user's allowed folders list

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...