File and Path Handling

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. FileRise <= 3.3.0 - Unauthenticated File ReadCVE-2026-25231error311 · CVSS 7.5 · 1.7% likely

   CWE-552

2. FileRise shared-folder upload path traversal allows arbitrary file write and admin takeoverCVE-2026-54414error311 · CVSS 9.8 · 0.7% likely

   CWE-22

3. FileRise: WebDAV upload path bypasses filename validation enforced by regular uploadsCVE-2026-33071error311 · CVSS 4.3 · 0.7% likely

   CWE-434

4. FileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence OracleCVE-2026-33329error311 · CVSS 8.1 · 0.5% likely

   CWE-22

5. FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage rootCVE-2026-104109error311 · CVSS 6.8 · 0.4% likely

   CWE-59

6. FileRise: Authenticated path traversal escapes configured storage root through inherited ACLsCVE-2026-104107error311 · CVSS 6.5 · 0.4% likely

   CWE-22

7. FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklistCVE-2026-57491error311 · CVSS 6.5 · 0.3% likely

   CWE-434

8. FileRise Shared Folder Symlink EscapeCVE-2026-55498error311 · CVSS 4.8 · 0.3% likely

   CWE-59

9. FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload rootCVE-2026-62664error311 · CVSS 5.4 · 0.3% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.