Login Request a demo
ER
Vendor
error311
1 product with CVEs on record
38
CVEs
0
On KEV
23
New 30D
Products
FI
FileRise
error311
9.8
38 CVEs0 on KEV23 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104109
FI
FileRise
error311
6.8
0%
Oct 14FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root
CVE-2026-104107
FI
FileRise
error311
6.5
0%
Oct 14FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs
CVE-2026-104110
FI
FileRise
error311
5.3
0%
Oct 14FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
CVE-2026-104108
FI
FileRise
error311
8.1
0%
Oct 14FileRise OIDC login can bind an attacker identity to an existing local account
CVE-2026-103977
FI
FileRise
error311
8.1
0%
Oct 14FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
CVE-2026-104105
FI
FileRise
error311
6.4
0%
Oct 14FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)
CVE-2026-104106
FI
FileRise
error311
6.5
0%
Oct 14FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification
CVE-2026-103988
FI
FileRise
error311
5.4
0%
Oct 14FileRise renameFolder omits destination-parent authorization
CVE-2026-69193
FI
FileRise
error311
6.5
0%
Oct 14FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying
CVE-2026-69191
FI
FileRise
error311
5.4
0%
Oct 14FileRise: Login Method Restriction Bypass via Direct API Access
CVE-2026-77427
FI
FileRise
error311
5.9
0%
Oct 14FileRise: Insecure default cryptographic key fallback in manual installs
CVE-2026-69194
FI
FileRise
error311
4.8
0%
Oct 14FileRise: Unsanitized footerHtml in Public Site Config
CVE-2026-64856
FI
FileRise
error311
3.7
0%
Oct 14FileRise: Missing Authentication Guard on File Snippet Preview Endpoint
CVE-2026-62664
FI
FileRise
error311
5.4
0%
Oct 14FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root
CVE-2026-61844
FI
FileRise
error311
7.1
0%
Oct 14FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation
CVE-2026-61843
FI
FileRise
error311
8.2
0%
Oct 14FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares
CVE-2026-57493
FI
FileRise
error311
6.8
0%
Oct 14FileRise: Remember-me auto-login uses stale admin role from token instead of current role
CVE-2026-57492
FI
FileRise
error311
7.4
0%
Oct 14FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation
CVE-2026-57490
FI
FileRise
error311
8.1
1%
Oct 14FileRise: WebDAV authentication bypasses TOTP/MFA entirely
CVE-2026-57491
FI
FileRise
error311
6.5
0%
Oct 14FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist
CVE-2026-57489
FI
FileRise
error311
8.1
1%
Oct 14FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass
CVE-2026-55498
FI
FileRise
error311
4.8
0%
Oct 14FileRise Shared Folder Symlink Escape
CVE-2026-54459
FI
FileRise
error311
4.3
0%
Oct 12FileRise: Missing CSRF enforcement for file creation and share-link creation
CVE-2026-92616
FI
FileRise
error311
6.8
0%
Sep 16FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance
CVE-2026-54414
FI
FileRise
error311
9.8
1%
Jun 19FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover
CVE-2026-44460
FI
FileRise
error311
7.4
0%
May 27FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret
CVE-2026-33477
FI
FileRise
error311
4.3
0%
Mar 26FileRise has incorrect authorization in /api/file/snippet.php allows read_own users to read other users’ file content
CVE-2026-33330
FI
FileRise
error311
7.1
0%
Mar 24FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback
CVE-2026-33329
FI
FileRise
error311
8.1
0%
Mar 24FileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle
CVE-2026-33072
FI
FileRise
error311
7.5
0%
Mar 20FileRise: Default Encryption Key Enables Token Forgery and Config Decryption
CVE-2026-33071
FI
FileRise
error311
8.8
1%
Mar 20FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads
CVE-2026-33070
FI
FileRise
error311
4.8
0%
Mar 20FileRise has Unauthenticated Share Link Deletion
CVE-2026-25231
FI
FileRise
error311
7.5
2%
Feb 9FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control
CVE-2026-25230
FI
FileRise
error311
5.4
0%
Feb 9FileRise affected by HTML Injection using color property in file tags
CVE-2025-68116
FI
FileRise
error311
5.4
0%
Dec 16FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling
CVE-2025-66403
FI
FileRise
error311
5.4
0%
Dec 1FileRise Vulnerable to Stored XSS via SVG Upload
CVE-2025-62510
FI
FileRise
error311
8.1
0%
Oct 20FileRise insecure folder visibility via name-based mapping and incomplete ACL checks
CVE-2025-62509
FI
FileRise
error311
8.1
0%
Oct 20FileRise improper ownership/permission validation allowed cross-tenant file operations