CVE-2026-25890 - File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes...

CVE-2026-25890 - File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes...

CVE ID : CVE-2026-25890 Published : Feb. 9, 2026, 9:21 p.m. | 1 hour, 1 minute ago Description : File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's

CVE Details

Published
Feb. 9, 2026