CVE-2026-3266Disclosure(opentext / filr)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs. This issue affects Filr: through 25.1.2.

opentext CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://portal.microfocus.com/s/article/KM000045579?language=en_US

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

filr

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 1d ago at 2 mentions (2026-03-03); latest day: 2
4 total mentions across 2 days

Affected systems

Vendors

opentext

Products

filr

Deep dive

Activity timeline4 mentions / 2d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Full discourse4 posts

Vulmon Vulnerability Feed@VulmonFeeds218d
Disclosure
CVE-2026-3266 Missing Authorization in OpenText Filr Through 25.1.2 Allows Authentication Bypass https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3266
Post summary
The post announces CVE-2026-3266, a missing authorization flaw in OpenText Filr up to version 25.1.2 that permits authentication bypass.
0000060
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash219d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3266 - Improper access control vulnerability has been discovered in OpenText™ Filr. Intel Report: https://ift.tt/vOolu8b
Post summary
An improper access control vulnerability (CVE-2026-3266) has been discovered in OpenText Filr, with an Intel report linked for further details.
0000046
344 followersView on X
Infoflowcloud@infoflowcloud219d
Disclosure
🚨*CVE* CVE-2026-3266 Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC wit… https://www.cve.org/CVERecord?id=CVE-2026-3266 ----- Traducción: CVE-2026-3266 Vu… http://infoflow.cloud`
Post summary
A new CVE-2026-3266 vulnerability in OpenText Filr is disclosed, allowing authentication bypass via missing authorization and enabling unauthenticated users to obtain XSRF tokens and perform RPC calls.
0000049
55 followersView on X
CVE@CVEnew219d
Disclosure
CVE-2026-3266 Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC wit… https://www.cve.org/CVERecord?id=CVE-2026-3266
Post summary
The text announces CVE-2026-3266, a missing authorization flaw in OpenText Filr that allows unauthenticated users to obtain XSRF tokens and perform RPC calls, but provides no PoC, exploit, patch, or active exploitation details.
00000237
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	opentext	filr	-	-	-

Explore more

Back to dashboard opentext CVEs filr vulnerabilities

What researchers are saying

CVE-2026-3266

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-3266, a missing authorization flaw in OpenText Filr up to version 25.1.2 that permits authentication bypass.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

An improper access control vulnerability (CVE-2026-3266) has been discovered in OpenText Filr, with an Intel report linked for further details.

Infoflowcloud@infoflowcloudDisclosure

A new CVE-2026-3266 vulnerability in OpenText Filr is disclosed, allowing authentication bypass via missing authorization and enabling unauthenticated users to obtain XSRF tokens and perform RPC calls.

CVE@CVEnewDisclosure

The text announces CVE-2026-3266, a missing authorization flaw in OpenText Filr that allows unauthenticated users to obtain XSRF tokens and perform RPC calls, but provides no PoC, exploit, patch, or active exploitation details.