FileRise Web-Based File Manager Vulnerability Exposes File Upload Functionality

CVE-2026-61843

What is CVE-2026-61843?

FileRise, a web-based file management tool, has a vulnerability that allows unauthenticated users to overwrite existing files in shared folders. This occurs when upload-enabled shared-folder and upload-only links fail to reject a destination filename that matches an existing file. An unauthorized visitor with a valid share token and configured share password can exploit this flaw to replace file contents while metadata remains unchanged. Authenticated users can also be affected through specific upload functions, demonstrating significant security concerns for users relying on FileRise prior to version 3.18.0, which addresses this issue.

References