CVE-2026-61844
FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation
CVSS score
7.1
EPSS probability
—
Risk score
0.7
Published
21 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.2
CVE-2026-61843
FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares
E
Patch status unknown
8.1
CVE-2026-104108
FileRise OIDC login can bind an attacker identity to an existing local account
E
Patch status unknown
8.1
CVE-2026-103977
FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
E
Patch status unknown Public Exploits:1
8.1
CVE-2026-57490
FileRise: WebDAV authentication bypasses TOTP/MFA entirely
E
Patch status unknown
8.1
CVE-2026-57489
FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass
E
Patch status unknown
7.4
CVE-2026-57492
FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation
E
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-61844"