CVE Intelligence

Filegator Filegator vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Filegator Filegator: 1 record(s), with affected versions and fixes.
cpe:2.3:a:filegator:filegator

CVE-2026-63358 High · 7.3 CWE-732 Jul 21, 2026
FileGator privilege escalation
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.