Vulnerabilities in filebrowser
61 resultsCVE-2026-54091HIGHFile Browser: Incorrect access control in public directory shares via rule path rebasingEPSS 0.5%CVE-2026-82235HIGHfilebrowser through 2.63.23 Denial of Service via named pipesEPSS 0.5%CVE-2026-54094HIGHFile Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scopeEPSS 0.5%CVE-2026-25890HIGHFile Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URLEPSS 0.5%CVE-2026-90930HIGHFile Browser through 2.63.23 Path Traversal via Symlink AliasEPSS 0.5%CVE-2026-72835HIGHfilebrowser before v2.63.21 Access Rule Bypass via Path CanonicalizationEPSS 0.5%CVE-2026-55667HIGHFile Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanupEPSS 0.5%CVE-2026-23849MEDIUMFile Browser vulnerable to Username Enumeration via Timing Attack in /api/loginEPSS 0.5%CVE-2026-73612HIGHFile Browser before v2.63.22 Authorization Bypass via Recursive OperationsEPSS 0.5%CVE-2025-64523HIGHFileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion FunctionEPSS 0.5%CVE-2026-54097HIGHFile Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefixEPSS 0.4%CVE-2026-32761MEDIUMFile Browser has an Authorization Policy Bypass in its Public Share Download FlowEPSS 0.4%CVE-2026-54090HIGHFile Browser: Command Allowlist Bypass via Shell Metacharacter InjectionEPSS 0.4%CVE-2026-90928HIGHFile Browser through 2.63.23 Memory Exhaustion via subtitle endpointEPSS 0.4%CVE-2026-90929HIGHFile Browser 2.5.0 Directory Deletion via Upload Failure CleanupEPSS 0.4%CVE-2026-90927HIGHfilebrowser through 2.63.23 Denial of Service via unbounded WebSocket messageEPSS 0.4%CVE-2026-73611HIGHFile Browser 2.50.0 through 2.63.21 JWT Expiration BypassEPSS 0.4%CVE-2026-62684LOWFile Browser: Share API exposes the password hash and bypass tokenEPSS 0.4%CVE-2026-35605MEDIUMFile Browser has an access rule bypass via HasPrefix without trailing separator in path matchingEPSS 0.4%CVE-2025-53893HIGHFile Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File ProcessingEPSS 0.4%