CVE-2026-54414
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. The upload filename validation permits URL-encoded sequences.
Risk Assessment
Risk of full compromise of the application and server through malicious file writes and admin account theft, potentially leading to data breaches and service disruption.
Recommendation
Update FileRise to version 3.16.0 or later. Additionally, secure the endpoint against path traversal by implementing proper input validation.
Original NVD description (English source)
FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEX_FILE_NAME, which permit URL-encoded sequences (the regex blocks / and \ but not %).