Login Request a demo
ER
Vendor
error311
1 product with CVEs on record
26
CVEs
0
On KEV
23
New 30D
Products
FI
FileRise
error311
9.8
26 CVEs0 on KEV23 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104109
FI
FileRise
error311
6.8
0%
Oct 14FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root
CVE-2026-104107
FI
FileRise
error311
6.5
0%
Oct 14FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs
CVE-2026-104110
FI
FileRise
error311
5.3
0%
Oct 14FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
CVE-2026-104108
FI
FileRise
error311
8.1
0%
Oct 14FileRise OIDC login can bind an attacker identity to an existing local account
CVE-2026-103977
FI
FileRise
error311
8.1
0%
Oct 14FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
CVE-2026-104105
FI
FileRise
error311
6.4
0%
Oct 14FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)
CVE-2026-104106
FI
FileRise
error311
6.5
0%
Oct 14FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification
CVE-2026-103988
FI
FileRise
error311
5.4
0%
Oct 14FileRise renameFolder omits destination-parent authorization
CVE-2026-69193
FI
FileRise
error311
6.5
0%
Oct 14FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying
CVE-2026-69191
FI
FileRise
error311
5.4
0%
Oct 14FileRise: Login Method Restriction Bypass via Direct API Access
CVE-2026-77427
FI
FileRise
error311
5.9
0%
Oct 14FileRise: Insecure default cryptographic key fallback in manual installs
CVE-2026-69194
FI
FileRise
error311
4.8
0%
Oct 14FileRise: Unsanitized footerHtml in Public Site Config
CVE-2026-64856
FI
FileRise
error311
3.7
0%
Oct 14FileRise: Missing Authentication Guard on File Snippet Preview Endpoint
CVE-2026-62664
FI
FileRise
error311
5.4
0%
Oct 14FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root
CVE-2026-61844
FI
FileRise
error311
7.1
0%
Oct 14FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation
CVE-2026-61843
FI
FileRise
error311
8.2
0%
Oct 14FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares
CVE-2026-57493
FI
FileRise
error311
6.8
0%
Oct 14FileRise: Remember-me auto-login uses stale admin role from token instead of current role
CVE-2026-57492
FI
FileRise
error311
7.4
0%
Oct 14FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation
CVE-2026-57490
FI
FileRise
error311
8.1
1%
Oct 14FileRise: WebDAV authentication bypasses TOTP/MFA entirely
CVE-2026-57491
FI
FileRise
error311
6.5
0%
Oct 14FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist
CVE-2026-57489
FI
FileRise
error311
8.1
1%
Oct 14FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass
CVE-2026-55498
FI
FileRise
error311
4.8
0%
Oct 14FileRise Shared Folder Symlink Escape
CVE-2026-54459
FI
FileRise
error311
4.3
0%
Oct 12FileRise: Missing CSRF enforcement for file creation and share-link creation
CVE-2026-92616
FI
FileRise
error311
6.8
0%
Sep 16FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance
CVE-2026-54414
FI
FileRise
error311
9.8
1%
Jun 19FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover
CVE-2026-44460
FI
FileRise
error311
7.4
0%
May 27FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret