Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:22:38 +0000 CVE-2026-54414 — FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover https://cve.radiocsirt.org/vuln/cve-2026-54414 <p><strong>Affected:</strong> error311 FileRise</p> <p>FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEX_FILE_NAME, which permit URL-encoded sequences (the regex blocks / and \ but not %).</p> <p><strong>Affected:</strong> error311 FileRise</p> <p>FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEX_FILE_NAME, which permit URL-encoded sequences (the regex blocks / and \ but not %).</p> https://cve.radiocsirt.org/vuln/cve-2026-54414