CVE-2026-54459Proof of concept (PoC) published · CISA
FileRise: Missing CSRF enforcement for file creation and share-link creation
CVSS score
4.3
EPSS probability
%0.1
Risk score
0.0
Published
3 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-54414
FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover
E
Patch verifiedEPSS %1
8.1
CVE-2026-57489
FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass
E
Patch status unknownEPSS %0
8.1
CVE-2026-103977
FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
E
Patch status unknown Public Exploits:1EPSS %0
8.1
CVE-2026-57490
FileRise: WebDAV authentication bypasses TOTP/MFA entirely
E
Patch status unknownEPSS %0
7.6
CVE-2026-92616
FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance
E
Patch verifiedEPSS %0
8.2
CVE-2026-61843
FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares
E
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-54459"