Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-90929

1 brief RSS
high advisory

Improper Authorization in File Browser Direct-Upload Endpoint

File Browser versions 2.5.0 through 2.63.23 are vulnerable to an improper authorization flaw allowing authenticated users to trigger recursive directory deletion via the direct-upload endpoint.

File Browser cve-2026-90929 improper-authorization file-browser impact vulnerability
1r 1t 1c