CVE-2026-62683 | filebrowser File Browser up to 2.63.16 Bolt backend DeleteWithPathPrefix userID unrestricted upload

July 15, 2026 Yanac

A vulnerability was found in filebrowser File Browser up to 2.63.16. It has been rated as critical. The impacted element is the function DeleteWithPathPrefix of the component Bolt backend. This manipulation of the argument userID causes unrestricted upload.

The identification of this vulnerability is CVE-2026-62683. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More