https://vulnerability.circl.lu/sightings/feed 2026-10-20T12:09:45.984679+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0d714a8b-aa20-4e03-966e-ed547aa2bdb5/export 2026-10-20T12:09:46.004537+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0d714a8b-aa20-4e03-966e-ed547aa2bdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61843", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117442128388669643", "content": "CVE-2026-61843 FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists. An unauthenticated visitor with a valid share token and any configured share password can upload a file with the same name as an existing file and silently replace its content while the original uploader metadata remains. The same replacement gap affects ordinary authenticated uploads through /api/upload/upload.php and authenticated upload-only users who lack edit authority over the existing file. This issue is fixed in version 3.18.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-61843https://github.com/error311/FileRise/security/advisories/GHSA-r787-5hp3-4874https://github.com/error311/FileRise/commit/9ed1a38f00918849dbda30f54291d1451ed80d11https://github.com/error311/FileRise/releases/tag/v3.18.0#error311 #FileRise#CVE_2026_61843#bot", "creation_timestamp": "2026-10-15T00:37:44.646118Z"} 2026-10-15T00:37:44.646118+00:00 https://vulnerability.circl.lu/sighting/ede182e0-abf9-4e79-9187-5669b3d31783/export 2026-10-20T12:09:46.006613+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ede182e0-abf9-4e79-9187-5669b3d31783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/274bszkermagz", "content": "CVE-2026-61843 - FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares\nCVE ID : CVE-2026-61843\n \n Published : Oct. 14, 2026, 9:17 p.m. | 15\u00a0minutes ago\n \n Description : FileRise is a self-hosted web-based file manager with multi-file upload, editing, an...", "creation_timestamp": "2026-10-14T22:04:16.608722Z"} 2026-10-14T22:04:16.608722+00:00