Vendor
Error311
38 known vulnerabilities in products by Error311, 0 of them actively exploited (CISA KEV).
Key figures
38
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-25231 | FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control | 7.5 | |
| High | CVE-2026-57489 | Error311 FileRise: Authentication Bypass by Spoofing | 8.1 | |
| Critical | CVE-2026-54414 | FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover | 9.8 | |
| High | CVE-2026-57490 | FileRise: WebDAV authentication bypasses TOTP/MFA entirely | 8.1 | |
| High | CVE-2026-61843 | FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares | 8.2 | |
| High | CVE-2026-103977 | FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts | 8.1 | |
| High | CVE-2026-92616 | FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance | 6.8 | |
| High | CVE-2026-57492 | Error311 FileRise: Missing Authentication for Critical Function | 7.4 | |
| Medium | CVE-2026-104109 | Error311 FileRise: Link Following | 6.8 | |
| High | CVE-2026-104108 | FileRise OIDC login can bind an attacker identity to an existing local account | 8.1 | |
| High | CVE-2026-61844 | FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation | 7.1 | |
| Medium | CVE-2026-69193 | FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying | 6.5 | |
| Medium | CVE-2026-104107 | FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs | 6.5 | |
| Medium | CVE-2026-57491 | FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist | 6.5 | |
| High | CVE-2026-33329 | Error311 FileRise: Path Traversal | 8.1 | |
| Medium | CVE-2026-57493 | FileRise: Remember-me auto-login uses stale admin role from token instead of current role | 6.8 | |
| Medium | CVE-2026-77427 | FileRise: Insecure default cryptographic key fallback in manual installs | 5.9 | |
| Medium | CVE-2026-104106 | Error311 FileRise: Missing Authentication for Critical Function | 6.5 | |
| Medium | CVE-2026-104105 | Error311 FileRise: Authentication Bypass by Capture-replay | 6.4 | |
| Medium | CVE-2026-104110 | Error311 FileRise: Missing Authentication for Critical Function | 5.3 | |
| Medium | CVE-2026-62664 | Error311 FileRise: Path Traversal | 5.4 | |
| High | CVE-2026-44460 | FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret | 7.4 | |
| High | CVE-2025-68116 | FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling | 8.9 | |
| Medium | CVE-2026-55498 | FileRise Shared Folder Symlink Escape | 4.8 | |
| High | CVE-2026-33330 | FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback | 7.1 |
Products
| FileRise | 38 | 0 |