filebrowser filebrowser

Name: filebrowser filebrowser
Brand: filebrowser

productUS

cpe:2.3:a:filebrowser:filebrowser:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical10high7medium0low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-46398US	high8.8	6.72% (94th)	Exploit	2.18.0	2022-02-04	< 2.18.0
CVE-2026-35585US	high7.2	1.92% (80th)	Exploit	no fix	2026-04-07	2.0.0 → 2.63.1
CVE-2026-25890US	—OT elevated	0.51% (43rd)	Exploit	2.57.1	2026-02-09	< 2.57.1
CVE-2026-32759US	high8.1	1.94% (80th)	—	no fix	2026-03-20	≤ 2.61.2
CVE-2025-52903US	—	1.21% (68th)	—	no fix	2025-06-26	= 2.32.0
CVE-2025-52904US	—	1.11% (66th)	—	no fix	2025-06-26	= 2.32.0
CVE-2023-39612US	critical9.0	0.88% (59th)	—	2.25.0	2023-09-16	< 2.25.0
CVE-2026-32760US	critical9.8	0.68% (52nd)	—	2.62.0	2026-03-20	< 2.62.0
CVE-2026-34528US	critical9.8	0.65% (51st)	—	2.62.2	2026-04-01	< 2.62.2
CVE-2025-52995US	medium6.6	0.64% (50th)	—	no fix	2025-06-30	≤ 2.33.8
CVE-2025-52901US	medium6.5	0.60% (49th)	—	no fix	2025-06-30	≤ 2.33.0
CVE-2026-30933US	—OT elevated	0.58% (47th)	—	no fix	2026-03-10	3 versions
CVE-2025-53826US	critical9.8	0.55% (46th)	—	no fix	2025-07-15	= 2.39.0
CVE-2025-52997US	high7.5OT elevated	0.54% (45th)	—	2.34.1	2025-06-30	< 2.34.1
CVE-2026-29188US	high8.1	0.51% (43rd)	—	2.61.1	2026-03-05	< 2.61.1
CVE-2026-23849US	—	0.48% (41st)	—	2.55.0	2026-01-19	< 2.55.0
CVE-2025-64523US	high8.8	0.46% (40th)	—	2.45.1	2025-11-12	< 2.45.1
CVE-2026-32761US	—OT elevated	0.43% (37th)	—	2.62.0	2026-03-20	< 2.62.0
CVE-2025-53893US	medium6.5	0.41% (35th)	—	no fix	2025-07-15	= 2.38.0
CVE-2026-32758US	—OT elevated	0.39% (33rd)	—	2.62.0	2026-03-20	< 2.62.0
CVE-2026-35605US	high7.5	0.39% (33rd)	—	2.63.1	2026-04-07	< 2.63.1
CVE-2025-52996US	medium4.3	0.39% (33rd)	—	no fix	2025-06-30	≤ 2.32.0
CVE-2026-35607US	high8.8	0.38% (32nd)	—	no fix	2026-04-07	≤ 2.63.0
CVE-2026-30934US	medium5.4	0.37% (31st)	—	no fix	2026-03-10	3 versions
CVE-2026-25889US	—	0.37% (30th)	—	2.57.1	2026-02-09	< 2.57.1
CVE-2026-34530US	—	0.36% (29th)	—	2.62.2	2026-04-01	< 2.62.2
CVE-2026-28492US	medium6.5	0.34% (28th)	—	2.61.0	2026-03-05	2.0.0 → 2.61.0
CVE-2026-35606US	high7.5OT elevated	0.34% (27th)	—	no fix	2026-04-07	≤ 2.63.0
CVE-2026-35604US	high8.1OT elevated	0.33% (26th)	—	2.63.1	2026-04-07	< 2.63.1
CVE-2025-52902US	medium5.4	0.33% (26th)	—	2.33.7	2025-06-26	< 2.33.7
CVE-2026-34529US	critical9.0	0.32% (25th)	—	2.62.2	2026-04-01	< 2.62.2
CVE-2025-52900US	—OT elevated	0.22% (13th)	—	2.33.7	2025-06-26	< 2.33.7

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-305Authentication Bypass by Primary Weakness2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan