CVE-2026-32761 File Browser has an Authorization Policy Bypass in its Public Share Download Flow
PublishedFile Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.0 and below contain a permission enforcement bypass which allows users who are denied download privileges (perm.download = false)...