Login Request a demo
FI
Product
filebrowser
by gtsteffaniak · last CVE Oct 27, 2026
9
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 4Medium 3Low 0
Severity
All severities9Critical2High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add filebrowser to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46410
8.7
0%
Jul 20
FileBrowser Quantum: unauthenticated user share share info
Affected: < 1.3.2-stable; < 1.4.1-beta
CVE-2026-116682
New
8.6–Oct 27
FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory
Affected: < 1.5.2-stable; >= 2.0.0-beta, < 2.0.1-beta
CVE-2026-54910
7.7
0%
Jul 20
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
Affected: < 1.4.3-beta
CVE-2026-30933
7.5
1%
Mar 10
FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info
Affected: >= 1.3.0-beta, < 1.3.1-beta; >= 1.2.6-beta, < 1.2.2-stable; = 1.1.3-stable
Showing 4