CVE-2026-82235 - filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server goroutines and exhaust connection resources. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82261 [高危] CVE-2026-82261 - SvelteKit (@sveltejs/kit) versions >=2.49.0 and
• CVE-2026-82260 [高危] CVE-2026-82260 - SvelteKit (@sveltejs/kit) versions >=2.49.0 and
• CVE-2026-82256 [中危] CVE-2026-82256 - SvelteKit before 2.69.1 fails to properly validate re…
• CVE-2026-82235 [中危] CVE-2026-82235 - filebrowser through 2.63.23 fails to validate named p…
• CVE-2026-52687 [中危] CVE-2026-52687 - An attacker that has valid credentials can select a c…
• CVE-2026-42395 [中危] CVE-2026-42395 - A host listed as a trusted proxy can send forwarding …
• CVE-2026-42391 [高危] CVE-2026-42391 - An unauthenticated attacker can send an IMAP ID comma…
• CVE-2026-40019 [中危] CVE-2026-40019 - An unauthenticated attacker can send a truncated quot…