CVE-2026-62843 | filebrowser File Browser up to 2.63.16 Archive Builder ReplaceAll nameInArchive path traversal

July 15, 2026 Yanac

A vulnerability labeled as problematic has been found in filebrowser File Browser up to 2.63.16. Affected is the function ReplaceAll of the component Archive Builder. Executing a manipulation of the argument nameInArchive can lead to relative path traversal.

This vulnerability is tracked as CVE-2026-62843. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More