This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-82235 | BDVDB-2026-366164 Detail

filebrowserfilebrowser

Description#

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server goroutines and exhaust connection resources.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-400 Uncontrolled Resource Consumption

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.