CVE-2026-25889 - File Browser has an Authentication Bypass in User Password Update

CVE ID : CVE-2026-25889 Published : Feb. 9, 2026, 9:18 p.m. | 1 hour, 4 minutes ago Description : File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password (or an admin to change any user's password) without providing the current password. By using Title Case field name