CVE-2026-25231 Scanner
CVE-2026-25231 Scanner - Arbitrary File Read vulnerability in FileRise
Used 2.9k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-25231
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthenticated file read vulnerability due to the lack of access control on the /uploads directory. Files uploaded to this directory can be accessed directly by any user who knows or can guess the file path, without requiring authentication. As a result, sensitive data could be exposed, and privacy may be breached. This vulnerability is fixed in 3.3.0.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
filerise
Updated Sep 22, 2026View on NVD →
S4E scanner
CVE history: filerise
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →