What is CVE-2026-82236?

CVE-2026-82236 is a low-severity vulnerability, classified under Incomplete Cleanup. CVSS score: 3.1/10. Published 2026-08-28.

How severe is CVE-2026-82236?

Low severity. CVSS v3 base score is 3.1 out of 10.

CVE-2026-82236

CVE-2026-82236

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.

Weakness classification (CWE)

CWE-459 — Incomplete Cleanup

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-82236?: CVE-2026-82236 is a low-severity vulnerability, classified under Incomplete Cleanup. CVSS score: 3.1/10. Published 2026-08-28.
How severe is CVE-2026-82236?: Low severity. CVSS v3 base score is 3.1 out of 10.