<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 06 Aug 2026 12:17:22 +0000</lastBuildDate>
    <item>
      <title>7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd</title>
      <link>https://vulnerability.circl.lu/sighting/7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd/export</link>
      <description>{"uuid": "7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, &amp;lt;4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:57.317919Z"}</description>
      <content:encoded>{"uuid": "7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, &amp;lt;4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:57.317919Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd/export</guid>
      <pubDate>Thu, 06 Aug 2026 00:00:57 +0000</pubDate>
    </item>
    <item>
      <title>3b66a070-ea1e-4c62-a841-44e45528e01f</title>
      <link>https://vulnerability.circl.lu/sighting/3b66a070-ea1e-4c62-a841-44e45528e01f/export</link>
      <description>{"uuid": "3b66a070-ea1e-4c62-a841-44e45528e01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-06T00:00:08.958596Z"}</description>
      <content:encoded>{"uuid": "3b66a070-ea1e-4c62-a841-44e45528e01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-06T00:00:08.958596Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3b66a070-ea1e-4c62-a841-44e45528e01f/export</guid>
      <pubDate>Thu, 06 Aug 2026 00:00:08 +0000</pubDate>
    </item>
    <item>
      <title>41258fbd-9338-4c2d-a717-7a4d04027fb9</title>
      <link>https://vulnerability.circl.lu/sighting/41258fbd-9338-4c2d-a717-7a4d04027fb9/export</link>
      <description>{"uuid": "41258fbd-9338-4c2d-a717-7a4d04027fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-05T21:00:04.088747Z"}</description>
      <content:encoded>{"uuid": "41258fbd-9338-4c2d-a717-7a4d04027fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-05T21:00:04.088747Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/41258fbd-9338-4c2d-a717-7a4d04027fb9/export</guid>
      <pubDate>Wed, 05 Aug 2026 21:00:04 +0000</pubDate>
    </item>
    <item>
      <title>b83ea308-7768-45d4-bb0a-021a98cafa28</title>
      <link>https://vulnerability.circl.lu/sighting/b83ea308-7768-45d4-bb0a-021a98cafa28/export</link>
      <description>{"uuid": "b83ea308-7768-45d4-bb0a-021a98cafa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, &amp;lt;4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T03:00:05.262233Z"}</description>
      <content:encoded>{"uuid": "b83ea308-7768-45d4-bb0a-021a98cafa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, &amp;lt;4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T03:00:05.262233Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b83ea308-7768-45d4-bb0a-021a98cafa28/export</guid>
      <pubDate>Wed, 05 Aug 2026 03:00:05 +0000</pubDate>
    </item>
    <item>
      <title>019b8c11-3fca-4bda-abe8-4b05200edec0</title>
      <link>https://vulnerability.circl.lu/sighting/019b8c11-3fca-4bda-abe8-4b05200edec0/export</link>
      <description>{"uuid": "019b8c11-3fca-4bda-abe8-4b05200edec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54910", "type": "published-proof-of-concept", "source": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w", "content": "", "creation_timestamp": "2026-08-01T00:35:03.865056Z"}</description>
      <content:encoded>{"uuid": "019b8c11-3fca-4bda-abe8-4b05200edec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54910", "type": "published-proof-of-concept", "source": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w", "content": "", "creation_timestamp": "2026-08-01T00:35:03.865056Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/019b8c11-3fca-4bda-abe8-4b05200edec0/export</guid>
      <pubDate>Sat, 01 Aug 2026 00:35:03 +0000</pubDate>
    </item>
    <item>
      <title>dea069c6-83d9-4921-88d7-3e08a13a4c8b</title>
      <link>https://vulnerability.circl.lu/sighting/dea069c6-83d9-4921-88d7-3e08a13a4c8b/export</link>
      <description>{"uuid": "dea069c6-83d9-4921-88d7-3e08a13a4c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n&amp;gt; **CVSS Score:** 7.7\n&amp;gt; **Published:** 2026-07-31\n&amp;gt; **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: &amp;lt; 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T00:00:16.049048Z"}</description>
      <content:encoded>{"uuid": "dea069c6-83d9-4921-88d7-3e08a13a4c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n&amp;gt; **CVSS Score:** 7.7\n&amp;gt; **Published:** 2026-07-31\n&amp;gt; **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: &amp;lt; 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T00:00:16.049048Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dea069c6-83d9-4921-88d7-3e08a13a4c8b/export</guid>
      <pubDate>Sat, 01 Aug 2026 00:00:16 +0000</pubDate>
    </item>
    <item>
      <title>615a5ed9-a19f-4c30-8d3c-a9351fb4c9c4</title>
      <link>https://vulnerability.circl.lu/sighting/615a5ed9-a19f-4c30-8d3c-a9351fb4c9c4/export</link>
      <description>{"uuid": "615a5ed9-a19f-4c30-8d3c-a9351fb4c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n&amp;gt; **CVSS Score:** 7.7\n&amp;gt; **Published:** 2026-07-31\n&amp;gt; **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: &amp;lt; 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T23:31:28.511183Z"}</description>
      <content:encoded>{"uuid": "615a5ed9-a19f-4c30-8d3c-a9351fb4c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n&amp;gt; **CVSS Score:** 7.7\n&amp;gt; **Published:** 2026-07-31\n&amp;gt; **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: &amp;lt; 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T23:31:28.511183Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/615a5ed9-a19f-4c30-8d3c-a9351fb4c9c4/export</guid>
      <pubDate>Fri, 31 Jul 2026 23:31:28 +0000</pubDate>
    </item>
    <item>
      <title>0b2bd605-043b-4d6b-a4e2-f2429ca47312</title>
      <link>https://vulnerability.circl.lu/sighting/0b2bd605-043b-4d6b-a4e2-f2429ca47312/export</link>
      <description>{"uuid": "0b2bd605-043b-4d6b-a4e2-f2429ca47312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsleuvm2m", "content": "\ud83d\udfe0 CVE-2026-5491 - High (7.5)\n\nDriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5491/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T02:00:54.143648Z"}</description>
      <content:encoded>{"uuid": "0b2bd605-043b-4d6b-a4e2-f2429ca47312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsleuvm2m", "content": "\ud83d\udfe0 CVE-2026-5491 - High (7.5)\n\nDriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5491/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T02:00:54.143648Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0b2bd605-043b-4d6b-a4e2-f2429ca47312/export</guid>
      <pubDate>Thu, 30 Jul 2026 02:00:54 +0000</pubDate>
    </item>
    <item>
      <title>1d3d1a7a-4b85-4fde-b40f-8ab132814610</title>
      <link>https://vulnerability.circl.lu/sighting/1d3d1a7a-4b85-4fde-b40f-8ab132814610/export</link>
      <description>{"uuid": "1d3d1a7a-4b85-4fde-b40f-8ab132814610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstkhdrfa2g", "content": "CVE-2026-5491 - DriveLock Directory Traversal Information Disclosure Vulnerability\nCVE ID : CVE-2026-5491\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...", "creation_timestamp": "2026-07-29T21:10:00.678727Z"}</description>
      <content:encoded>{"uuid": "1d3d1a7a-4b85-4fde-b40f-8ab132814610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstkhdrfa2g", "content": "CVE-2026-5491 - DriveLock Directory Traversal Information Disclosure Vulnerability\nCVE ID : CVE-2026-5491\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...", "creation_timestamp": "2026-07-29T21:10:00.678727Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1d3d1a7a-4b85-4fde-b40f-8ab132814610/export</guid>
      <pubDate>Wed, 29 Jul 2026 21:10:00 +0000</pubDate>
    </item>
    <item>
      <title>34dd6548-56cb-4268-b1db-42f42cf1221b</title>
      <link>https://vulnerability.circl.lu/sighting/34dd6548-56cb-4268-b1db-42f42cf1221b/export</link>
      <description>{"uuid": "34dd6548-56cb-4268-b1db-42f42cf1221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2yb6fc2m", "content": "\ud83d\udfe0 CVE-2026-54910 - High (7.7)\n\nFileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54910/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T16:00:39.643991Z"}</description>
      <content:encoded>{"uuid": "34dd6548-56cb-4268-b1db-42f42cf1221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2yb6fc2m", "content": "\ud83d\udfe0 CVE-2026-54910 - High (7.7)\n\nFileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54910/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T16:00:39.643991Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/34dd6548-56cb-4268-b1db-42f42cf1221b/export</guid>
      <pubDate>Mon, 20 Jul 2026 16:00:39 +0000</pubDate>
    </item>
  </channel>
</rss>
