CVE-2026-94619

FileGator is a multi-user file manager. Prior to 7.15.0, POST /upload in backend/Controllers/UploadController.php uses the request-supplied resumableFilename as an unnamespaced key in shared temporary storage. In a multi-user deployment configured with distinct per-user home directories, a low-privileged user with upload permission can set resumableTotalChunks and resumableTotalSize to zero so the assembly loop writes no data, after which the handler reads a pre-existing temporary file with that name, stores it in the attacker's home directory, and removes it. The same filename path can append data when chunks are supplied, allowing disclosure, modification, or deletion of another user's transient object, including a pending archive or the login rate-limit lockfile, while Tmpfs path sanitization limits the primitive to the temporary directory. This issue is fixed in version 7.15.0.

• CWE-862

• https://github.com/filegator/filegator/commit/cae442a8323fddae7c8cee0924cdbb1aa6eea702
• https://github.com/filegator/filegator/pull/598
• https://github.com/filegator/filegator/releases/tag/v7.15.0
• https://github.com/filegator/filegator/security/advisories/GHSA-44r8-3p76-84mw
• https://github.com/filegator/filegator/security/advisories/GHSA-44r8-3p76-84mw

Published

Nov 6, 2026

Last Modified

Nov 9, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-94609authentik is an open-source identity provider. Prior to 2026…8.8
• CVE-2026-9461A security vulnerability has been detected in Edimax EW-7438…8.8
• CVE-2026-94611authentik is an open-source identity provider. Prior to 2026…8.1
• CVE-2026-94612authentik is an open-source identity provider. Prior to 2026…7.4
• CVE-2026-94613authentik is an open-source identity provider. Prior to 2026…7.5
• CVE-2026-94618FileGator is a multi-user file manager. Prior to 7.15.0, GET…5.4
• CVE-2026-9462A vulnerability was detected in Edimax EW-7438RPn 1.31. Affe…8.8
• CVE-2026-94620Classroom 50 is a free and open-source tool for managing and…9.4
• CVE-2026-94621AliasVault is a privacy-first password manager with built-in…6.3
• CVE-2026-94622vLLM versions through 0.29.0 contain a denial of service vul…7.5
• CVE-2026-94623vLLM through 0.29.0 contains a denial of service vulnerabili…7.5
• CVE-2026-94624vLLM through 0.29.0 contains a denial of service vulnerabili…7.5