tocsin

CVE-2026-54096

4 advisories.

Go/github.com/filebrowser/filebrowser/v2 CVE-2026-54096: high 8.4, EPSS 0.18%

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.63.7 or later.

go get github.com/filebrowser/filebrowser/v2@v2.63.7

Affected

introducedfixedlast affected
02.63.7-

Fixed versions

2.63.7

Sources

CVE-2026-54096 · published · modified · JSON

Go/github.com/filebrowser/filebrowser CVE-2026-54096: high 8.4, EPSS 0.18%

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.11.0

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54096 · published · modified · JSON

Go/github.com/filebrowser/filebrowser CVE-2026-54096: unknown, EPSS 0.18%

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path in github.com/filebrowser/filebrowser

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54096 · published · modified · JSON

Go/github.com/filebrowser/filebrowser/v2 CVE-2026-54096: unknown, EPSS 0.18%

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path in github.com/filebrowser/filebrowser

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.63.7 or later.

go get github.com/filebrowser/filebrowser/v2@v2.63.7

Affected

introducedfixedlast affected
02.63.7-

Fixed versions

2.63.7

Sources

CVE-2026-54096 · published · modified · JSON