CVE-2026-57490 error311 CVE debrief

Who should care

Defenders responsible for FileRise instances with WebDAV enabled should assess exposure and prioritize upgrading to version 3.16.0 or later. Defenders should also review WebDAV configuration and authentication settings. Operators of FileRise instances with WebDAV enabled should verify exposure and plan for upgrades.

Why it matters

CVE-2026-57490 allows an attacker to bypass TOTP/MFA when authenticating to FileRise WebDAV service. Defenders should prioritize verifying exposure and upgrading to version 3.16.0 or later.

• An attacker can authenticate to the WebDAV service without supplying the second factor
• An attacker can exercise the account's WebDAV file permissions
• Defenders need to verify exposure of FileRise instances with WebDAV enabled
• Defenders need to prioritize upgrading to version 3.16.0 or later

Technical summary

Prior to version 3.16.0, FileRise WebDAV Basic authentication validates only the account username and password and does not enforce the account's configured TOTP factor. An attacker who knows valid primary credentials for a TOTP-enabled account can authenticate to the enabled WebDAV service without supplying the second factor and exercise the account's WebDAV file permissions. The browser login path enforces TOTP, but the separate public/webdav.php authentication callback did not. This issue is fixed in version 3.16.0.

Defensive priority

Defenders should prioritize verifying exposure of FileRise instances with WebDAV enabled and upgrading to version 3.16.0 or later.

Recommended defensive actions

• Verify exposure of FileRise instances with WebDAV enabled
• Upgrade to version 3.16.0 or later
• Review WebDAV configuration and authentication settings
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source item provide details on the vulnerability, including the affected version and fixed version. The CVE record was published on 2026-10-14T20:20:23.954Z and has not been modified since then. The source item provides additional context on the vulnerability. Defenders should verify the exposure of FileRise instances with WebDAV enabled and review WebDAV configuration and authentication settings.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.