{"metadata": {"vulnerability": "CVE-2026-57489", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-06-24T14:53:40.111Z", "date_only": false, "value": "2026-06-24T14:53:40.111Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-57489", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T20:16:00.021Z", "date_only": false, "value": "2026-10-14T20:16:00.021Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-57489", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T20:16:00.021Z", "date_only": false, "value": "2026-10-14T20:16:00.021Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-57489", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T21:17:37.200Z", "date_only": false, "value": "2026-10-14T21:17:37.200", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-57489", "record": "FKIE_CVE-2026-57489", "field": "published"}, {"timestamp": "2026-10-14T22:16:16.204Z", "date_only": false, "value": "2026-10-14T22:16:16.204818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i4jiulu2ysikl", "record": "CVE-2026-57489", "field": "creation_timestamp", "uuid": "d3c32977-2820-4066-adf8-1a6719c6bce1", "content": "CVE-2026-57489 - FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass\nCVE ID : CVE-2026-57489\n \n Published : Oct. 14, 2026, 9:17 p.m. | 15\u00a0minutes ago\n \n Description : FileRise is a self-hosted web-based file manager ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/i4jiulu2ysikl"}, {"timestamp": "2026-10-15T00:27:38.754Z", "date_only": false, "value": "2026-10-15T00:27:38.754067Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117442088679005462", "record": "CVE-2026-57489", "field": "creation_timestamp", "uuid": "70bda385-3f3b-42cd-b525-0652c36c5fe9", "content": "CVE-2026-57489 FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FR_TRUSTED_PROXIES. When the backend application port is reachable directly, an unauthenticated attacker can supply X-Remote-User and obtain a session for the asserted account, including an administrator account, without a password or MFA. The flaw is limited to deployments that enable proxy-header authentication and expose an untrusted path to the backend. This issue is fixed in version 3.16.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-57489https://github.com/error311/FileRise/security/advisories/GHSA-98pg-w3jp-r8fvhttps://github.com/error311/FileRise/commit/f7114ca2a4e624238dda0d097a07ad6b05c11bb6https://github.com/error311/FileRise/releases/tag/v3.16.0#error311 #FileRise#CVE_2026_57489#bot", "url": "https://infosec.exchange/users/cve/statuses/117442088679005462"}, {"timestamp": "2026-10-20T02:06:40.410Z", "date_only": false, "value": "2026-10-20T02:06:40.410758Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-57489", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T02:06:40.410Z", "date_only": false, "value": "2026-10-20T02:06:40.410758Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-57489", "record": "FKIE_CVE-2026-57489", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T02:07:03.653Z", "date_only": false, "value": "2026-10-20T02:07:03.653Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-57489", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T02:07:03.653Z", "date_only": false, "value": "2026-10-20T02:07:03.653Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-57489", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T03:17:15.860Z", "date_only": false, "value": "2026-10-20T03:17:15.860", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-57489", "record": "FKIE_CVE-2026-57489", "field": "lastModified"}]}