https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:49:31.385230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361202 EUVD-2026-361202 2026-10-06T10:49:31.434026+00:00 EUVD-2026-361202 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82235 fkie_cve-2026-82235 2026-10-06T10:49:31.434066+00:00

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server goroutines and exhaust connection resources.

 https://cve.radiocsirt.org/vuln/ghsa-j27f-mghv-p674 GHSA-j27f-mghv-p674 2026-10-06T10:49:31.434100+00:00

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server goroutines and exhaust connection resources.