GT
Vendor
gtsteffaniak
11
CVEs
0
On KEV
1
New 30D
Products
FI9.3
filebrowser
gtsteffaniak
9 CVEs0 on KEV1 new
FQ9.1
Filebrowser Quantum
Gtsteffaniak
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116682 New | FI filebrowser gtsteffaniak | 8.6 | Oct 27 | FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory |
| CVE-2026-54910 | FI filebrowser gtsteffaniak | 7.7 | Jul 20 | FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files |
| CVE-2026-54685 | FI filebrowser gtsteffaniak | 5.3 | Jul 20 | FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel |
| CVE-2026-46410 | FI filebrowser gtsteffaniak | 8.7 | Jul 20 | FileBrowser Quantum: unauthenticated user share share info |
| CVE-2026-48777 | FI filebrowser gtsteffaniak | 9.3 | Jun 16 | FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory |
| CVE-2026-44542 | FI filebrowser gtsteffaniak | 9.1 | May 14 | FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion |
| CVE-2026-30934 | FI filebrowser gtsteffaniak | 5.4 | Mar 10 | FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) |
| CVE-2026-30933 | FI filebrowser gtsteffaniak | 7.5 | Mar 10 | FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info |
| CVE-2026-27611 | FI filebrowser gtsteffaniak | 6.5 | Feb 25 | FileBrowser Quantum: Password Protection Not Enforced on Shared File Links |