Product by Dromara
Free-fs
5 known vulnerabilities in Free-fs (Dromara), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-129161 | Dromara free-fs 2.0.1 through 2.3.1 Password Reset Code Brute-Force Account Takeover | 7.4 | |
| High | CVE-2026-129162 | Dromara free-fs 2.0.1 through 2.3.1 Missing Authentication via File Stream Preview | 5.9 | |
| High | CVE-2026-129164 | Dromara free-fs 2.0.1 through 2.3.1 Share Code and Permission Scope Bypass | 5.9 | |
| High | CVE-2026-129160 | Dromara free-fs 2.0.1 through 2.3.1 SQL Injection via orderBy Parameter | 6.5 | |
| Medium | CVE-2026-129163 | Dromara free-fs 2.0.1 through 2.3.1 Stored XSS via File Preview Endpoint | 5.4 |