CVE ID :CVE-2026-103977 Published : Oct. 14, 2026, 9:17 p.m. | 15 minutes ago Description :FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise stores failed TOTP verification attempts in $_SESSION. An attacker who...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-103977 - FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

VERWANDTEARTIKEL

CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level authorization on player lessons API

CVE-2026-57489 - FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

CVE-2026-57490 - FileRise: WebDAV authentication bypasses TOTP/MFA entirely

CVE-2026-61843 - FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

CVE-2026-104108 - FileRise OIDC login can bind an attacker identity to an existing local account

CVE-2026-55680 - WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter