{"schema":"vulnpedia.research/1","cve":"CVE-2026-104110","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq","tags":["x_refsource_CONFIRM","exploit"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T20:40:15.899Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T20:40:15.899Z","url":"https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-15T15:37:43.913Z","url":"https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq"},{"source":"nvd","sourceId":"CVE-2026-104110","modified":"2026-10-15T16:17:33.457","url":"https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq"}]},{"url":"https://github.com/error311/FileRise/commit/1bf1f44d221398dcf6484520d0905e1f4bf319c7","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T20:40:15.899Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T20:40:15.899Z","url":"https://github.com/error311/FileRise/commit/1bf1f44d221398dcf6484520d0905e1f4bf319c7"},{"source":"nvd","sourceId":"CVE-2026-104110","modified":"2026-10-15T16:17:33.457","url":"https://github.com/error311/FileRise/commit/1bf1f44d221398dcf6484520d0905e1f4bf319c7"}]},{"url":"https://github.com/error311/FileRise/releases/tag/v3.24.0","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T20:40:15.899Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T20:40:15.899Z","url":"https://github.com/error311/FileRise/releases/tag/v3.24.0"},{"source":"nvd","sourceId":"CVE-2026-104110","modified":"2026-10-15T16:17:33.457","url":"https://github.com/error311/FileRise/releases/tag/v3.24.0"}]},{"source":"euvd","sourceId":"EUVD-2026-101687","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101687","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101687","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101687"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/pervinzahidli/CVE-2026-104110","source":"poc-in-github","sourceId":"CVE-2026-104110","description":"Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php","modified":"2026-10-01T18:55:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-104110","url":"https://github.com/pervinzahidli/CVE-2026-104110"},{"source":"poc-in-github","sourceId":"CVE-2026-104110","modified":"2026-10-01T18:55:49Z","url":"https://github.com/pervinzahidli/CVE-2026-104110"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[]}