Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: filebrowser 2.63.19 Clear all filters
TI-2026-51064 CVE-2026-72838 · GHSA-4fmc-f52r-93hm

FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload

Priority LOW 32

FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0053 Published 2026-08-14 Fixed in 2.63.19 CWE-770
TI-2026-51062 CVE-2026-72836 · GHSA-f37p-wpgx-m9mr

FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass

Priority HIGH 75

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0055 Published 2026-08-14 Fixed in 2.63.19 CWE-178