Read the docs

filebrowser

Records65All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high34CVSS 7.0–8.9

Exploited now

filebrowser records in CISA KEV

No filebrowser vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

65 records

Priority HIGH 81

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00574 Published 2026-08-13 No fix listed CWE-266
Priority HIGH 80

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00612 Published 2026-06-25 No fix listed CWE-287
Priority HIGH 78

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00537 Published 2026-03-05 Fixed in 2.61.1 CWE-284
Priority HIGH 76

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.

CVSS 3.1HIGH 8.1 Network High privileges No interaction EPSS 0.00635 Published 2025-06-30 Fixed in 2.33.10 CWE-77
Priority HIGH 75

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0055 Published 2026-08-14 Fixed in 2.63.19 CWE-178
Priority HIGH 72

File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00476 Published 2026-08-13 Fixed in 2.63.22 CWE-639
Priority HIGH 70

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01106 Published 2025-06-26 Fixed in 2.33.8 CWE-77
TI-2026-40189 CVE-2026-55667 · GHSA-fmm7-x4gx-8jhr

Path traversal in filebrowser

Priority HIGH 69

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00494 Published 2026-06-25 Fixed in 2.63.16 CWE-22
Load more
Open these records in search →