HarborGuard / CVE
Back to search
HIGHCVE-2026-30933Published Modified CNA GitHub_M

CVE-2026-30933: FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. This vulnerability is fixed in 1.3.1-beta and 1.2.2-stable.

Metrics

CVSS v3.1
7.5
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • gtsteffaniak / filebrowser
    >= 1.3.0-beta, < 1.3.1-beta · >= 1.2.6-beta, < 1.2.2-stable · = 1.1.3-stable
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References