Search: CVE-2026-44542

CVE-2026-44542 is a critical path traversal vulnerability in gtsteffaniak's FileBrowser Quantum versions prior to 1.3.1-stable and 1.3.9-beta. The flaw allows an unauthenticated attacker with a valid public share hash and delete permissions to delete arbitrary files outside the intended shared directory by exploiting improper sanitization of attacker-controlled path input. This affects the public/api/resources and public/api/resources/bulk endpoints. The vulnerability is fixed in versions 1.3.1-stable and 1.