01 Record

CVE-2026-72839

filebrowser through 2.63.16 Privilege Escalation via Signup

CriticalPUBLISHEDCNA: VulnCheck

Base score9.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

02 Description

filebrowser through 2.63.16 Privilege Escalation via Signup

Published: 2026-08-13 21:54Z20 HR AGO
Last updated: 2026-08-14 16:52Z1 HR AGO
Reserved: 2026-08-10
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: Critical (CVSS 9.3)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weaknesses: CWE-266
SSVC decision: ExploitationpocAutomatableyesTechnical Impacttotal
Data version: 5.2
Document digest: 5c2962cda6fc86799729bb916a387f18404d583294d71f93085dca9ed32777ff

VendorProductVersionsPlatforms

filebrowserfilebrowser0 to 2.63.16—

github.comGitHub Security Advisory (GHSA-6759-996p-gpj6)https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6759-996p-gpj6vendor-advisory
www.vulncheck.comVulnCheck Advisory: filebrowser through 2.63.16 Privilege Escalation via Signuphttps://www.vulncheck.com/advisories/filebrowser-through-privilege-escalation-via-signupthird-party-advisory