Auth bypass in Gtsteffaniak Filebrowser

CVE-2026-27611

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to versions 1.1.3-stable and 1.2.6-beta, when users share password-protected files, the recipient can completely bypass the password and still download the file. Thi…

Vulnerability class: Information Disclosure

EPSS: 0.001 (18.5th percentile) — read the EPSS interpretation.