Filegator

5 CVEs in 2 Filegator products, including Filegator, Filegator/filegator. Newest: CVE-2026-94619 (2026-11-06). Severity, EPSS and public exploits for each.

Filegator products with known CVEs

ProductCVEs
Filegator5
Filegator/filegator2
Filegator CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-94619Medium5.92026-11-06FileGator is a multi-user file manager. Prior to 7.15.0, POST /upload in backend/Controllers/UploadController.php uses the request-supplied resumableFilename a…
CVE-2026-94618Medium5.42026-11-06FileGator is a multi-user file manager. Prior to 7.15.0, GET /batchdownload in backend/Controllers/DownloadController.php uses batchDownloadStart() to stream a…
CVE-2026-63358High7.32026-07-21FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through…
CVE-2022-1849Medium5.42022-05-24Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.
CVE-2022-1850High8.12022-05-24Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.