CVE-2026-30933

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. This vulnerability is fixed in 1.3.1-beta and 1.2.2-stable.

• CWE-200
• CWE-306
• CWE-602
• CWE-306

• https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.2.2-stableRelease Notes
• https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.3.1-betaRelease Notes
• https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-525j-95gf-766fExploit, Vendor Advisory

Published

Mar 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30928Glances is an open-source system cross-platform monitoring t…7.5
• CVE-2026-30929ImageMagick is free and open-source software used for editin…7.8
• CVE-2026-3093GitLab has remediated an issue in GitLab CE/EE affecting all…4.7
• CVE-2026-30930Glances is an open-source system cross-platform monitoring t…9.8
• CVE-2026-30931ImageMagick is free and open-source software used for editin…7.8
• CVE-2026-30932Froxlor is open source server administration software. Prior…8.8
• CVE-2026-30934FileBrowser Quantum is a free, self-hosted, web-based file m…5.4
• CVE-2026-30935ImageMagick is free and open-source software used for editin…4.4
• CVE-2026-30936ImageMagick is free and open-source software used for editin…5.5
• CVE-2026-30937ImageMagick is free and open-source software used for editin…6.1
• CVE-2026-30938Parse Server is an open source backend that can be deployed …5.3
• CVE-2026-30939Parse Server is an open source backend that can be deployed …7.5