Lucene search
+L

8 matches found

NVD
NVD
•added 2026/10/14 9:17 p.m.•21 views

CVE-2026-57490

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...

8.1CVSS0.00522EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/14 8:20 p.m.•14 views

EUVD-2026-101637

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...

8.1CVSS5.9AI score0.00522EPSS
SaveExploits0References3
Mend
Mend
•added 2026/10/14 8:20 p.m.•12 views

CVE-2026-57490

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...

8.6CVSS5.8AI score0.00522EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/14 8:20 p.m.•13 views

CVE-2026-57490 FileRise: WebDAV authentication bypasses TOTP/MFA entirely

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...

8.1CVSS5.8AI score0.00522EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/14 8:20 p.m.•27 views

CVE-2026-57490

Prior to version 3.16.0 , the self-hosted file manager FileRise is vulnerable to an authentication bypass when WebDAV is enabled. The root cause lies in the public/webdav.php authentication callback, which validates only the username and password via AuthModel::authenticate() while failing to enf...

8.1CVSS5.8AI score0.00522EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/14 8:20 p.m.•16 views

CVE-2026-57490 FileRise: WebDAV authentication bypasses TOTP/MFA entirely

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...

8.1CVSS5.8AI score0.00522EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•9 views

CVE-2026-57490: Use of Single-factor Authentication

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...

8.1CVSS5.9AI score0.00522EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•13 views

PT-2026-114225

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate and does not...

8.1CVSS5.9AI score0.00522EPSS
SaveExploits0References4
Rows per page
Query Builder