CVE-2026-82236 LOW

CVE-2026-82236: File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion

Weakness CWE-459
Published August 28, 2026
Last update August 28, 2026
View on NVD All CVEs

CVSS base score

2.3/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication.

Key dates

02Disclosure timeline

August 28, 2026 CVE published
August 28, 2026 Record updated