https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T02:45:24.787603+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-35604 CVE-2026-35604 — File Browser share links remain accessible after Share/Download permissions are revoked 2026-10-12T02:45:24.788662+00:00

Affected: filebrowser

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, when an admin revokes a user's Share and Download permissions, existing share links created by that user remain fully accessible to unauthenticated users. The public share download handler does not re-check the share owner's current permissions. This vulnerability is fixed in 2.63.1.