{"vulnerability": "CVE-2026-5491", "sightings": [{"uuid": "0b2bd605-043b-4d6b-a4e2-f2429ca47312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsleuvm2m", "content": "\ud83d\udfe0 CVE-2026-5491 - High (7.5)\n\nDriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5491/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T02:00:54.143648Z"}, {"uuid": "615a5ed9-a19f-4c30-8d3c-a9351fb4c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n> **CVSS Score:** 7.7\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: < 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T23:31:28.511183Z"}, {"uuid": "dea069c6-83d9-4921-88d7-3e08a13a4c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n> **CVSS Score:** 7.7\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: < 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T00:00:16.049048Z"}, {"uuid": "019b8c11-3fca-4bda-abe8-4b05200edec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54910", "type": "published-proof-of-concept", "source": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w", "content": "", "creation_timestamp": "2026-08-01T00:35:03.865056Z"}, {"uuid": "b83ea308-7768-45d4-bb0a-021a98cafa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T03:00:05.262233Z"}, {"uuid": "41258fbd-9338-4c2d-a717-7a4d04027fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-05T21:00:04.088747Z"}, {"uuid": "3b66a070-ea1e-4c62-a841-44e45528e01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-06T00:00:08.958596Z"}, {"uuid": "7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:57.317919Z"}, {"uuid": "1908fec7-1bf8-46ff-9312-0d88b4481a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv", "content": "", "creation_timestamp": "2026-08-12T20:35:10.808575Z"}, {"uuid": "06a998e3-9a9d-4a4e-a479-b3c9b0b3b0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5", "content": "# CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54917\n\n## Summary\nCVE-2026-54917 is a critical path traversal and authorization bypass vulnerability affecting the S3 and Iceberg REST catalog gateways in SeaweedFS. By explicitly disabling canonical path cleaning in the gorilla/mux routing system, relative path segments such as '..' are allowed to bypass routing constraints and access control checks. When these paths are collapsed server-side by the backend filer, they resolve to folders outside the authorized bucket boundary, allowing unauthorized cross-bucket access.\n\n## TL;DR\nSeaweedFS gateways disable routing path cleaning, allowing '..' segments to reach the backend. This permits users with access to a single bucket to bypass IAM boundaries and read/write files in any other bucket on the cluster.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SeaweedFS S3 API Gateway\n- SeaweedFS Iceberg REST Catalog Gateway\n- **SeaweedFS**: < 4.30 (Fixed in: `4.30`)\n\n## Mitigation\n\n- Upgrade all SeaweedFS deployments to version 4.30 or later.\n- Disable multi-tenant environments if immediate patching is not possible.\n- Restrict S3 and Iceberg port access using host-based firewalls or network access control lists.\n\n**Remediation Steps:**\n1. Audit existing deployments to locate all S3 API and Iceberg gateway configurations.\n2. Acquire the updated SeaweedFS package or container image (version 4.30 or higher).\n3. Apply the patch and restart the gateway services ('weed s3' or 'weed server').\n4. Verify remediation by attempting signed traversal requests and confirming they return HTTP 400.\n\n## References\n\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54917](https://nvd.nist.gov/vuln/detail/CVE-2026-54917)\n- [https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv](https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv)\n- [https://github.com/seaweedfs/seaweedfs/pull/9687](https://github.com/seaweedfs/seaweedfs/pull/9687)\n- [https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229](https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54917) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-12T22:31:56.548691Z"}, {"uuid": "0bea9a58-110d-4fae-a3d2-180d6b773a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5", "content": "# CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54917\n\n## Summary\nCVE-2026-54917 is a critical path traversal and authorization bypass vulnerability affecting the S3 and Iceberg REST catalog gateways in SeaweedFS. By explicitly disabling canonical path cleaning in the gorilla/mux routing system, relative path segments such as '..' are allowed to bypass routing constraints and access control checks. When these paths are collapsed server-side by the backend filer, they resolve to folders outside the authorized bucket boundary, allowing unauthorized cross-bucket access.\n\n## TL;DR\nSeaweedFS gateways disable routing path cleaning, allowing '..' segments to reach the backend. This permits users with access to a single bucket to bypass IAM boundaries and read/write files in any other bucket on the cluster.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SeaweedFS S3 API Gateway\n- SeaweedFS Iceberg REST Catalog Gateway\n- **SeaweedFS**: < 4.30 (Fixed in: `4.30`)\n\n## Mitigation\n\n- Upgrade all SeaweedFS deployments to version 4.30 or later.\n- Disable multi-tenant environments if immediate patching is not possible.\n- Restrict S3 and Iceberg port access using host-based firewalls or network access control lists.\n\n**Remediation Steps:**\n1. Audit existing deployments to locate all S3 API and Iceberg gateway configurations.\n2. Acquire the updated SeaweedFS package or container image (version 4.30 or higher).\n3. Apply the patch and restart the gateway services ('weed s3' or 'weed server').\n4. Verify remediation by attempting signed traversal requests and confirming they return HTTP 400.\n\n## References\n\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54917](https://nvd.nist.gov/vuln/detail/CVE-2026-54917)\n- [https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv](https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv)\n- [https://github.com/seaweedfs/seaweedfs/pull/9687](https://github.com/seaweedfs/seaweedfs/pull/9687)\n- [https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229](https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54917) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-13T00:01:14.322610Z"}, {"uuid": "6d541add-36d8-4ae8-9205-82921606f1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54919", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdamz6jm42x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54919 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 cpp-httplib: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7024E3DE-50D1-4751-A332-82384388DF5A", "creation_timestamp": "2026-07-10T22:56:17.676113Z"}, {"uuid": "3cd2f569-5ed3-4e13-8a97-60b838e19550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-24T15:00:10.494869Z"}, {"uuid": "34dd6548-56cb-4268-b1db-42f42cf1221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2yb6fc2m", "content": "\ud83d\udfe0 CVE-2026-54910 - High (7.7)\n\nFileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54910/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T16:00:39.643991Z"}, {"uuid": "b03a024d-5b23-4b77-aefa-47003ec550a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-25T00:00:10.301364Z"}, {"uuid": "1d3d1a7a-4b85-4fde-b40f-8ab132814610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstkhdrfa2g", "content": "CVE-2026-5491 - DriveLock Directory Traversal Information Disclosure Vulnerability\nCVE ID : CVE-2026-5491\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...", "creation_timestamp": "2026-07-29T21:10:00.678727Z"}]}