CVE-2026-54910 | gtsteffaniak FileBrowser up to 1.4.2 Subtitles idx.GetRealPath path/name path traversal

July 20, 2026 Yanac

A vulnerability categorized as problematic has been discovered in gtsteffaniak FileBrowser up to 1.4.2. Affected by this issue is the function idx.GetRealPath of the component Subtitles Handler. Such manipulation of the argument path/name leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-54910. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More