Login Request a demo
FI
Product
filebrowser
by filebrowser · last CVE Sep 14, 2026
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities65In the news0Timeline
Severity mix
Critical 8High 26Medium 25Low 6
Severity
All severities65Critical8High26Medium25Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add filebrowser to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72839
9.8
1%
Aug 13
filebrowser through 2.63.16 Privilege Escalation via Signup
Affected: through 2.63.16
CVE-2026-34528
9.8
1%
Apr 1
File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution
Affected: < 2.62.2
CVE-2026-32760
9.8
1%
Mar 19
File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin
Affected: < 2.62.0
CVE-2025-53826
9.8
1%
Jul 15
FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout
Affected: = 2.39.0
CVE-2026-54088
9.3
1%
Jun 25
File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)
Affected: < 2.63.6
CVE-2026-54089
9.1
1%
Jun 25
File Browser: Authentication Bypass via Proxy Auth Header Forgery
Affected: >= 2.0.0-rc.1
CVE-2026-34529
9.0
0%
Apr 1
File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file
Affected: < 2.62.2
CVE-2023-39612
9.0
1%
Sep 16
A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Administrator via user interaction with a…
Affected: before 2.25.0
Showing 8