Auth bypass in Filebrowser

CVE-2026-35606

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in http/resource.go returns full text file content without che…

Vulnerability class: Broken Access Control

EPSS: 0.000 (13.3th percentile) — read the EPSS interpretation.