CVE-2026-82236 | BDVDB-2026-366165 Detail

Description#

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-28Record published in the CVE List.
2. Version 22026-09-30Most recent update recorded in the CVE List.