Skip to content
Threat Feed
Subscribe

Product

Filebrowser

2 briefs RSS
high advisory

FileBrowser Quantum Unauthenticated Information Disclosure Vulnerability

FileBrowser Quantum is susceptible to CVE-2026-46410, an unauthenticated information disclosure vulnerability, potentially exposing sensitive information such as source code and file paths.

filebrowser information-disclosure web-application github
2r 1t
critical advisory

FileBrowser Public Share DELETE API Path Traversal Allows Arbitrary File Deletion

A path traversal vulnerability exists in FileBrowser's public share DELETE API allowing unauthenticated attackers with valid share hashes and delete permissions to delete arbitrary files outside the shared directory, leading to unauthorized data loss and potential service disruption.

filebrowser +1 path-traversal file-deletion web-application
2r 1t