Login Request a demo
FI
Vendor
filebrowser
1 product with CVEs on record
65
CVEs
0
On KEV
0
New 30D
Products
FI
filebrowser
filebrowser
9.8
65 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-90930
FI
filebrowser
filebrowser
6.8
0%
Sep 14File Browser through 2.63.23 Path Traversal via Symlink Alias
CVE-2026-90929
FI
filebrowser
filebrowser
8.1
0%
Sep 14File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup
CVE-2026-90928
FI
filebrowser
filebrowser
6.5
0%
Sep 14File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint
CVE-2026-90927
FI
filebrowser
filebrowser
6.5
0%
Sep 14filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message
CVE-2026-82238
FI
filebrowser
filebrowser
3.1
0%
Aug 28filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads
CVE-2026-82237
FI
filebrowser
filebrowser
3.1
0%
Aug 28filebrowser through 2.63.23 Stale Share Link via File Rename
CVE-2026-82236
FI
filebrowser
filebrowser
3.1
0%
Aug 28File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion
CVE-2026-82235
FI
filebrowser
filebrowser
5.9
1%
Aug 28filebrowser through 2.63.23 Denial of Service via named pipes
CVE-2026-62684
FI
filebrowser
filebrowser
2.7
0%
Aug 18File Browser: Share API exposes the password hash and bypass token
CVE-2026-72838
FI
filebrowser
filebrowser
6.5
1%
Aug 14FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload
CVE-2026-72837
FI
filebrowser
filebrowser
8.8
1%
Aug 14File Browser before 2.63.20 Privilege Escalation via Proxy Authentication
CVE-2026-72836
FI
filebrowser
filebrowser
8.1
1%
Aug 14FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass
CVE-2026-72835
FI
filebrowser
filebrowser
6.8
0%
Aug 14filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization
CVE-2026-72834
FI
filebrowser
filebrowser
4.3
0%
Aug 14filebrowser before 2.63.19 Permission Bypass via checksum
CVE-2026-72839
FI
filebrowser
filebrowser
9.8
1%
Aug 13filebrowser through 2.63.16 Privilege Escalation via Signup
CVE-2026-73613
FI
filebrowser
filebrowser
8.2
1%
Aug 13filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink
CVE-2026-73612
FI
filebrowser
filebrowser
8.1
0%
Aug 13File Browser before v2.63.22 Authorization Bypass via Recursive Operations
CVE-2026-73611
FI
filebrowser
filebrowser
6.8
0%
Aug 13File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass
CVE-2026-62685
FI
filebrowser
filebrowser
8.1
1%
Jul 15File Browser: Colliding username normalization gives two users the same home directory
CVE-2026-62843
FI
filebrowser
filebrowser
6.8
0%
Jul 15File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)
CVE-2026-62683
FI
filebrowser
filebrowser
3.1
0%
Jul 15File Browser: Trailing-slash delete leaves a stale public share behind
CVE-2026-61874
FI
filebrowser
filebrowser
3.1
0%
Jul 12filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete
CVE-2026-55668
FI
filebrowser
filebrowser
6.3
0%
Jul 8File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope
CVE-2026-54090
FI
filebrowser
filebrowser
8.7
0%
Jun 25File Browser: Command Allowlist Bypass via Shell Metacharacter Injection
CVE-2026-54088
FI
filebrowser
filebrowser
9.3
1%
Jun 25File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)
CVE-2026-54089
FI
filebrowser
filebrowser
9.1
1%
Jun 25File Browser: Authentication Bypass via Proxy Auth Header Forgery
CVE-2026-54091
FI
filebrowser
filebrowser
7.5
1%
Jun 25File Browser: Incorrect access control in public directory shares via rule path rebasing
CVE-2026-54092
FI
filebrowser
filebrowser
6.5
1%
Jun 25File Browser: DoS Vulnerability on Public Login API
CVE-2026-54097
FI
filebrowser
filebrowser
7.2
0%
Jun 25File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix
CVE-2026-54093
FI
filebrowser
filebrowser
6.8
0%
Jun 25File Browser: Path traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames
CVE-2026-54094
FI
filebrowser
filebrowser
7.5
1%
Jun 25File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope
CVE-2026-54096
FI
filebrowser
filebrowser
8.4
0%
Jun 25File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path
CVE-2026-55667
FI
filebrowser
filebrowser
8.2
0%
Jun 25File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup
CVE-2026-35607
FI
filebrowser
filebrowser
8.8
0%
Apr 7File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands
CVE-2026-35606
FI
filebrowser
filebrowser
7.5
0%
Apr 7File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check
CVE-2026-35605
FI
filebrowser
filebrowser
7.5
0%
Apr 7File Browser has an access rule bypass via HasPrefix without trailing separator in path matching
CVE-2026-35604
FI
filebrowser
filebrowser
8.1
0%
Apr 7File Browser share links remain accessible after Share/Download permissions are revoked
CVE-2026-35585
FI
filebrowser
filebrowser
7.2
2%
Apr 7File Browser has a Command Injection via Hook Runner
CVE-2026-34530
FI
filebrowser
filebrowser
6.9
0%
Apr 1File Browser is vulnerable to Stored Cross-Site Scripting via text/template branding injection
CVE-2026-34528
FI
filebrowser
filebrowser
9.8
1%
Apr 1File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution
CVE-2026-34529
FI
filebrowser
filebrowser
9.0
0%
Apr 1File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file
CVE-2026-32761
FI
filebrowser
filebrowser
6.5
0%
Mar 19File Browser has an Authorization Policy Bypass in its Public Share Download Flow
CVE-2026-32760
FI
filebrowser
filebrowser
9.8
1%
Mar 19File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin
CVE-2026-32759
FI
filebrowser
filebrowser
8.1
2%
Mar 19File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely
CVE-2026-32758
FI
filebrowser
filebrowser
6.5
0%
Mar 19File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter
CVE-2026-30934
FI
Filebrowser
Filebrowser
5.4
0%
Mar 10FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse)
CVE-2026-30933
FI
Filebrowser
Filebrowser
7.5
1%
Mar 10FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info
CVE-2026-28492
FI
filebrowser
filebrowser
6.5
0%
Mar 5File Browser: Path Traversal in Public Share Links Exposes Files Outside Shared Directory
CVE-2026-29188
FI
filebrowser
filebrowser
8.1
1%
Mar 5File Browser: TUS Delete Endpoint Bypasses Delete Permission Check
CVE-2026-25890
FI
filebrowser
filebrowser
8.1
1%
Feb 9File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL
CVE-2026-25889
FI
filebrowser
filebrowser
5.4
0%
Feb 9File Browser has an Authentication Bypass in User Password Update
CVE-2026-23849
FI
filebrowser
filebrowser
5.3
0%
Jan 19File Browser vulnerable to Username Enumeration via Timing Attack in /api/login
CVE-2025-64523
FI
filebrowser
filebrowser
8.8
0%
Nov 12FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function
CVE-2025-53826
FI
filebrowser
filebrowser
9.8
1%
Jul 15FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout
CVE-2025-53893
FI
filebrowser
filebrowser
6.5
0%
Jul 15File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing
CVE-2025-52997
FI
filebrowser
filebrowser
7.5
1%
Jun 30File Browser Insecurely Handles Passwords
CVE-2025-52996
FI
filebrowser
filebrowser
4.3
0%
Jun 30File Browser's Password Protection of Links Vulnerable to Bypass
CVE-2025-52995
FI
filebrowser
filebrowser
6.6
1%
Jun 30File Browser vulnerable to command execution allowlist bypass
CVE-2025-52901
FI
filebrowser
filebrowser
6.5
1%
Jun 30File Browser allows sensitive data to be transferred in URL
CVE-2025-52904
FI
filebrowser
filebrowser
8.0
1%
Jun 26File Browser: Command Execution not Limited to Scope