What’s Vulnerable › Products

gtsteffaniak filebrowser vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your gtsteffaniak filebrowser version is affected

Latest gtsteffaniak filebrowser vulnerabilities

• CVE-2026-116682 — FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory (CVSS 8.6)
• CVE-2026-54910 — FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files (CVSS 7.7)
• CVE-2026-54685 — FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel (CVSS 5.3)
• CVE-2026-46410 — FileBrowser Quantum: unauthenticated user share share info (CVSS 8.7)
• CVE-2026-48777 — FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory (CVSS 9.3)
• CVE-2026-44542 — FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion (CVSS 9.1)
• CVE-2026-27611 — FileBrowser Quantum: Password Protection Not Enforced on Shared File Links (CVSS 6.5)