Skip to content
Threat Feed
Subscribe

Vendor

Vastsa

1 brief RSS
high advisory

CVE-2026-64619: FileCodeBox Rate Limit Bypass Vulnerability

Unauthenticated attackers can bypass rate limits in FileCodeBox versions before 2.4 due to a vulnerability in the IPRateLimit class, allowing them to enumerate share codes and retrieve other users' files without authentication by spoofing X-Real-IP and X-Forwarded-For headers without proper verification.

FileCodeBox rate-limit-bypass vulnerability web-application file-sharing data-exfiltration cve
2t 1c 4i