Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the EPUB preview function in File Browser is vulnerable to Stored Cross-Site Scripting (XSS). JavaScript embedded in a crafted EPUB file executes in the victim's browser when they preview the file. This issue has been patched in version 2.62.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-01 | 1 | Patch1 |
| 2026-04-02 | 1 | General1 |
CVE-2026-34529 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the … https://www.cve.org/CVERecord?id=CVE-2026-34529
Post summary
The statement mentions CVE-2026-34529 in the context of a file‑browser application and provides a brief technical overview, but contains no evidence of exploitation, PoC, or mitigation.
📚 CVE-2026-34529 (File Browser): High stored XSS via crafted EPUB—admin takeover. Patch: File Browser latest https://www.tenable.com/cve/newest https://nvd.nist.gov/vuln/detail/CVE-2026-34529 https://filebrowser.org/security
Post summary
The article reports a high‑severity stored XSS flaw in File Browser that can lead to admin takeover and recommends applying the latest patch, without evidence of active exploitation or PoC.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | filebrowser | filebrowser | - | - | - |