Product by Error311

    FileRise

    38 known vulnerabilities in FileRise (Error311), 0 of them actively exploited (CISA KEV).

    Key figures

    38

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in FileRise (Error311)
    HighCVE-2026-25231

    FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control

    also in 1 other product

    		7.5
    HighCVE-2026-57489

    Error311 FileRise: Authentication Bypass by Spoofing

    		8.1
    CriticalCVE-2026-54414

    FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover

    		9.8
    HighCVE-2026-57490

    FileRise: WebDAV authentication bypasses TOTP/MFA entirely

    		8.1
    HighCVE-2026-61843

    FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

    		8.2
    HighCVE-2026-103977

    FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

    		8.1
    HighCVE-2026-92616

    FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance

    		6.8
    HighCVE-2026-57492

    Error311 FileRise: Missing Authentication for Critical Function

    		7.4
    MediumCVE-2026-104109

    Error311 FileRise: Link Following

    		6.8
    HighCVE-2026-104108

    FileRise OIDC login can bind an attacker identity to an existing local account

    		8.1
    HighCVE-2026-61844

    FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation

    		7.1
    MediumCVE-2026-69193

    FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying

    		6.5
    MediumCVE-2026-104107

    FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs

    		6.5
    MediumCVE-2026-57491

    FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist

    		6.5
    HighCVE-2026-33329

    Error311 FileRise: Path Traversal

    also in 1 other product

    		8.1
    MediumCVE-2026-57493

    FileRise: Remember-me auto-login uses stale admin role from token instead of current role

    		6.8
    MediumCVE-2026-77427

    FileRise: Insecure default cryptographic key fallback in manual installs

    		5.9
    MediumCVE-2026-104106

    Error311 FileRise: Missing Authentication for Critical Function

    		6.5
    MediumCVE-2026-104105

    Error311 FileRise: Authentication Bypass by Capture-replay

    		6.4
    MediumCVE-2026-104110

    Error311 FileRise: Missing Authentication for Critical Function

    		5.3
    MediumCVE-2026-62664

    Error311 FileRise: Path Traversal

    		5.4
    HighCVE-2026-44460

    FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret

    		7.4
    HighCVE-2025-68116

    FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

    also in 1 other product

    		8.9
    MediumCVE-2026-55498

    FileRise Shared Folder Symlink Escape

    		4.8
    HighCVE-2026-33330

    FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

    also in 1 other product

    		7.1

    All vulnerabilities in search

    All products by Error311