CVE-2026-104105
MEDIUM 6.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the target account's valid primary credential and captures a TOTP code after its successful use can replay that code from another pending-login session before the window closes. The issue does not by itself disclose the primary credential or TOTP code. This issue is fixed in version 3.23.0.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.3%chance of exploitation in 30 days · 18th percentile
Impact if exploited
6.4CVSS 3.1 · MEDIUM
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityNone
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ⚠Privileges: Requires a low-privilege account
- ⚠User interaction: A user must take an action (click / open a file)
- ⚠Complexity: Needs a race window or specific setup
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-287: : Improper Authentication
- CWE-294: : Authentication Bypass by Capture-replay
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
References and research data (JSON)
All CVSS metrics
- MEDIUM 6.4 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N - MEDIUM 6.4 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
References
Exploit-tagged references (not proof of a PoC)
- https://github.com/error311/FileRise/security/advisories/GHSA-9pg4-98cx-r82j CVE record · GitHub_M · Updated 2026-10-14T20:37:44.884Z
CVE record · CISA-ADP · Updated 2026-10-15T13:52:38.802Z
NVD · CVE-2026-104105 · Updated 2026-10-15T14:17:13.867
Advisories
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101684 EUVD · EUVD-2026-101684
Technical & other
- https://github.com/error311/FileRise/commit/cc1118923b522baff28dca05bdd79c27f984c68a CVE record · GitHub_M · Updated 2026-10-14T20:37:44.884Z
NVD · CVE-2026-104105 · Updated 2026-10-15T14:17:13.867 - https://github.com/error311/FileRise/releases/tag/v3.23.0 CVE record · GitHub_M · Updated 2026-10-14T20:37:44.884Z
NVD · CVE-2026-104105 · Updated 2026-10-15T14:17:13.867