F
Vendor security profile
filebrowser
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical2
CISA KEV0
Public exploit12
Patch rate%39
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
14
4
0
CVE KEV
CVE severity distribution
18toplam CVE
Critical2 (11%)
High11 (61%)
Medium1 (6%)
Low4 (22%)
Patch and exploitation view
%39
Verified patch
%0
CISA KEV
%67
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
7.6
CVE-2026-90930
File Browser through 2.63.23 Path Traversal via Symlink Alias
F
Patch status unknownEPSS %1
7.2
CVE-2026-90929
File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup
F
Patch status unknownEPSS %0
7.1
CVE-2026-90928
File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint
F
Patch status unknownEPSS %0
7.1
CVE-2026-90927
filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message
F
Patch status unknownEPSS %0
2.3
CVE-2026-82238
filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads
F
Patch status unknownEPSS %0
2.3
CVE-2026-82237
filebrowser through 2.63.23 Stale Share Link via File Rename
F
Patch status unknownEPSS %0
2.3
CVE-2026-82236
File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion
F
Patch verifiedEPSS %0
8.2
CVE-2026-82235
filebrowser through 2.63.23 Denial of Service via named pipes
F
Patch verifiedEPSS %1
2.7
CVE-2026-62684
File Browser: Share API exposes the password hash and bypass token
F
Patch status unknownEPSS %0
7.1
CVE-2026-72838
FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload
F
Patch verifiedEPSS %1