{"metadata": {"vulnerability": "CVE-2026-55498", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-06-16T22:28:27.062Z", "date_only": false, "value": "2026-06-16T22:28:27.062Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55498", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T19:57:05.711Z", "date_only": false, "value": "2026-10-14T19:57:05.711Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55498", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T19:57:05.711Z", "date_only": false, "value": "2026-10-14T19:57:05.711Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-55498", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T20:17:49.050Z", "date_only": false, "value": "2026-10-14T20:17:49.050", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55498", "record": "FKIE_CVE-2026-55498", "field": "published"}, {"timestamp": "2026-10-15T00:23:35.963Z", "date_only": false, "value": "2026-10-15T00:23:35.963599Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117442072770851954", "record": "CVE-2026-55498", "field": "creation_timestamp", "uuid": "6fce59c6-47e7-4387-9f82-9983163ab7c7", "content": "CVE-2026-55498 FileRise Shared Folder Symlink Escape FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links with subfolder browsing enabled can follow a symbolic link inside the shared folder to a sibling directory under the upload root. An unauthenticated holder of a valid share token can use shared-folder listing, direct download, or ZIP creation to access files outside the folder that was actually shared. The flaw occurs because the affected shared-folder paths resolve symlinks without enforcing the original shared folder as the real-path boundary. This issue is fixed in version 3.15.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-55498https://github.com/error311/FileRise/security/advisories/GHSA-83rw-5ffw-p798https://github.com/error311/FileRise/commit/f24af3f2a25cec092d19de93acbc215e74659a22https://github.com/error311/FileRise/releases/tag/v3.15.0#error311 #FileRise#CVE_2026_55498#bot", "url": "https://infosec.exchange/users/cve/statuses/117442072770851954"}, {"timestamp": "2026-10-15T15:28:12.261Z", "date_only": false, "value": "2026-10-15T15:28:12.261024Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55498", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T15:28:12.261Z", "date_only": false, "value": "2026-10-15T15:28:12.261024Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55498", "record": "FKIE_CVE-2026-55498", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T15:28:30.570Z", "date_only": false, "value": "2026-10-15T15:28:30.570Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55498", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:28:30.570Z", "date_only": false, "value": "2026-10-15T15:28:30.570Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55498", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:18:14.007Z", "date_only": false, "value": "2026-10-15T16:18:14.007", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55498", "record": "FKIE_CVE-2026-55498", "field": "lastModified"}]}