PT-2026-7134 · Filerise · Filerise

Bytetyson · Publicado 2026-02-09 · Atualizado 2026-02-19 · CVE-2026-25231

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FileRise versions prior to 3.3.0

Description FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0 have an unauthenticated file read issue because of missing access control on the /uploads directory. Files uploaded to this directory can be directly accessed by anyone who knows or guesses the file path, without authentication. This could lead to sensitive data exposure and privacy breaches.

Recommendations Update to version 3.3.0 or later.

Exploit

Correção

Improper Access Control

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-284

CWE-552

Identificadores relacionados

CVE-2026-25231

GHSA-HV99-77CW-HVPR

Produtos afetados

Filerise

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25231.json · Exploit
• https://github.com/error311/FileRise/security/advisories/GHSA-hv99-77cw-hvpr · Aviso do Fabricante
• https://github.com/error311/FileRise/releases/tag/v3.3.0 · Nota
• https://twitter.com/CVEnew/status/2020959705846153618 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-25231 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-25231 · Aviso do Fabricante
• https://t.me/cveNotify/152502 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2020999264571191700 · Publicação no Twitter