Vulnerabilities

TI-2026-32454 CVE-2026-44542 · GHSA-fwj3-42wh-8673

FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion

HIGH 78

FileBrowser Quantum is a free, self-hosted, web-based file manager.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00523 Published 2026-05-14 Fixed in 1.3.1-stable, 1.3.9-beta +1 CWE-22

TI-2026-21997 CVE-2026-27611 · GHSA-8vrh-3pm2-v4v6

HIGH 70

FileBrowser Quantum is a free, self-hosted, web-based file manager.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00366 Published 2026-02-25 Fixed in 1.1.3-stable, 1.2.6-beta +1 CWE-200