CyberSecBulletin

FileGator vulnerabilities

We track 1 vulnerability in FileGator products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest FileGator vulnerabilities

  • 7.3 High severity

    FileGator: Incorrect Permission Assignment for Critical Resource

    CVE-2026-63358FileGator

    FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission