filebrowser vulnerabilities

CVEs per yearBy the year they were published

1. 202511
2. 202650

Newest CVEs

• CVE-2026-90930

  File Browser through 2.63.23 Path Traversal via Symlink Alias

  filebrowser · filebrowser

  High7.6
• CVE-2026-90929

  File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

  filebrowser · filebrowser

  High7.2
• CVE-2026-90928

  File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint

  filebrowser · filebrowser

  High7.1
• CVE-2026-90927

  filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message

  filebrowser · filebrowser

  High7.1
• CVE-2026-82238

  filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads

  filebrowser · filebrowser

  Low2.3
• CVE-2026-82237

  filebrowser through 2.63.23 Stale Share Link via File Rename

  filebrowser · filebrowser

  Low2.3
• CVE-2026-82236

  File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion

  filebrowser · filebrowser

  Low2.3
• CVE-2026-82235

  filebrowser through 2.63.23 Denial of Service via named pipes

  filebrowser · filebrowser

  High8.2
• CVE-2026-62684

  File Browser: Share API exposes the password hash and bypass token

  filebrowser · filebrowser

  Low2.7
• CVE-2026-72838

  FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload

  filebrowser · filebrowser

  High7.1