CVE Intelligence

Filegator vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Filegator products: 1 record(s), with severity, exploitation and fixes.

Filegator 1

Exploited only (KEV) →

CVE-2026-63358 High · 7.3 CWE-732 Jul 21, 2026
FileGator privilege escalation
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.