Filebrowser · weakness class
Denial of Service
7 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.
- FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload
- filebrowser through 2.63.23 Denial of Service via named pipes
- File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint
- filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message
- File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing
- File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion
- filebrowser through 2.63.23 Stale Share Link via File Rename
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.