Skip to content
Threat Feed
Subscribe

Product

FileBrowser <= 2.63.16

1 brief RSS
high advisory

FileBrowser Username Normalization Collision Leads to Authorization Bypass

A critical authorization bypass vulnerability, CVE-2026-62685, in FileBrowser versions <= 2.63.16 enables an attacker to gain full read and write access to other users' files by exploiting a username normalization collision during self-registration, thus bypassing per-user isolation and allowing data tampering or exfiltration.

FileBrowser <= 2.63.16 authorization-bypass web-application filebrowser vulnerability
4t 1c