Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

gtsteffaniak vulnerabilities

9 published CVEs name gtsteffaniak among the affected products.

Newest CVEs

  • CVE-2026-116682

    FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory

    gtsteffaniak · filebrowser

    High8.6
  • CVE-2026-54910

    FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files

    gtsteffaniak · filebrowser

    High7.7
  • CVE-2026-54685

    FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

    gtsteffaniak · filebrowser

    Medium5.3
  • CVE-2026-46410

    FileBrowser Quantum: unauthenticated user share share info

    gtsteffaniak · filebrowser

    High8.7
  • CVE-2026-48777

    FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory

    gtsteffaniak · filebrowser

    Critical9.3
  • CVE-2026-44542

    FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion

    gtsteffaniak · filebrowser

    Critical9.1
  • CVE-2026-30934

    FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse)

    gtsteffaniak · filebrowser

    High8.9
  • CVE-2026-30933

    FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info

    gtsteffaniak · filebrowser

    High7.5
  • CVE-2026-27611

    FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

    gtsteffaniak · filebrowser

    High7.1