CVE-2026-33070 - Vulnerability Analysis

Overview

FileRise < 3.8.0 contains a missing authentication vulnerability in the deleteShareLink endpoint, letting unauthenticated attackers delete arbitrary file share links causing denial of service, exploit requires knowledge of share token.

Severity & Score

Impact

Unauthenticated attackers can delete file share links, causing denial of service to shared file access.

Mitigation

Update to version 3.8.0 or later.

References

• https://github.com/error311/FileRise/releases/tag/v3.8.0
• https://github.com/error311/FileRise/security/advisories/GHSA-vh5m-w36c-99xv

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner