https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:48:23 +0000 https://cve.radiocsirt.org/vuln/cve-2026-54096 <p><strong>Affected:</strong> filebrowser</p> <p>File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.7, `POST /api/share/&lt;path&gt;` accepts an authenticated request for an arbitrary path and stores a public share record without checking whether the target file currently exists. Later, when a file is created at that same path, the previously created public share immediately becomes valid and exposes the new file through `GET /api/public/dl/&lt;hash&gt;`. This vulnerability is fixed in 2.63.7.</p> <p><strong>Affected:</strong> filebrowser</p> <p>File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.7, `POST /api/share/&lt;path&gt;` accepts an authenticated request for an arbitrary path and stores a public share record without checking whether the target file currently exists. Later, when a file is created at that same path, the previously created public share immediately becomes valid and exposes the new file through `GET /api/public/dl/&lt;hash&gt;`. This vulnerability is fixed in 2.63.7.</p> https://cve.radiocsirt.org/vuln/cve-2026-54096