Vulnerabilities CVE-2026-73611

CVE-2026-73611

High

Open

TLP:CLEAR

File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout page. Attackers with a previously valid token can access protected routes and administrative endpoints indefinitely, and exchange expired tokens for fresh ones via the renewal endpoint.

Details

CVSS Score: 7.6
CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Aug 13, 2026
Last Modified: Aug 13, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.