Known vulnerabilities in FileBrowser - page 2

Software: FileBrowser
Software CPE: cpe:2.3:a:file_browser:filebrowser:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FileBrowser FileBrowser is affected by 54 known vulnerabilities: 7 high, 14 medium, 33 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133486 - Incorrect Authorization
CVE-2026-54091
CWE-863 Medium
No
No
2.63.6 08.06.2026 SB2026060822
#VU133481 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-54088
CWE-78 High
No
No
2.63.6 08.06.2026 SB2026060822
#VU133480 - Authorization Bypass Through User-Controlled Key
CVE-2026-54097
CWE-639 Low
No
No
2.63.6 08.06.2026 SB2026060822
#VU133479 - Improper input validation
CVE-2026-32759
CWE-20 Low
No
No
2.62.0 08.06.2026 SB20260408139
#VU133478 - Insufficient Session Expiration
CVE-2025-53826
CWE-613 Low
No
No
2.40.0 08.06.2026 SB2026060821
#VU133477 - Uncontrolled Memory Allocation
CVE-2025-53893
CWE-789 Low
No
No
2.39.0 08.06.2026 SB2026060820
#VU133476 - Command injection
CVE-2026-54090
CWE-77 Medium
No
No
2.33.8 08.06.2026 SB2026060818
#VU125403 - Incorrect Authorization
CVE-2026-35604
CWE-863 Medium
No
No
2.63.1 08.04.2026 SB20260408143
#VU125402 - Improper Access Control
CVE-2026-35605
CWE-284 Low
No
No
2.63.1 08.04.2026 SB20260408143
#VU125401 - Missing Authorization
CVE-2026-35606
CWE-862 Low
No
No
2.63.1 08.04.2026 SB20260408143
#VU125400 - Improper Privilege Management
CVE-2026-35607
CWE-269 Low
No
No
2.63.1 08.04.2026 SB20260408143
#VU125399 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-35585
CWE-78 Low
No
No
2.63.0, 2.63.1 08.04.2026 SB20260408143
#VU125398 - Improper Privilege Management
CVE-2026-34528
CWE-269 High
No
No
2.62.2 08.04.2026 SB20260408141
#VU125397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34529
CWE-79 Low
No
No
2.62.2 08.04.2026 SB20260408141
#VU125396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34530
CWE-79 Low
No
No
2.62.2 08.04.2026 SB20260408141
#VU125395 - Incorrect Authorization
CVE-2026-32761
CWE-863 Low
No
No
2.62.0 08.04.2026 SB20260408139
#VU125394 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32758
CWE-22 Low
No
No
2.62.0 08.04.2026 SB20260408139
#VU125393 - Improper Privilege Management
CVE-2026-32760
CWE-269 High
No
No
2.62.0 08.04.2026 SB20260408139
#VU125392 - Improper Access Control
CVE-2026-29188
CWE-284 High
No
No
2.61.1 08.04.2026 SB20260408136
#VU125391 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-28492
CWE-22 Medium
No
No
2.61.0 08.04.2026 SB20260408134


Showing elements 21 - 40 out of 54