PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-69194 error311 CVE debrief

FileRise, a self-hosted web-based file manager, had an issue where the stored branding.footerHtml value was returned through the unauthenticated public site configuration API without server-side sanitization. This issue is fixed in version 3.21.0. The vulnerability could potentially allow unsanitized footer HTML to be returned, posing a risk to users. Administrators and users of FileRise should assess exposure and prioritize upgrading to version 3.21.0 or later to mitigate potential risks associated with unsanitized footer HTML.

Vendor
error311
Product
FileRise
CVSS
MEDIUM 4.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-15
Advisory published
2026-10-14
Advisory updated
2026-10-15

Who should care

Administrators and users of FileRise should assess exposure and prioritize upgrading to version 3.21.0 or later to mitigate potential risks associated with unsanitized footer HTML.

Why it matters

CVE-2026-69194 is a medium-severity issue in FileRise that could potentially allow unsanitized footer HTML to be returned through the public site configuration API. While the FileRise frontend sanitizes this value, defenders should still assess exposure and prioritize upgrading to version 3.21.0 or later.

  • Defenders should verify if stored footer HTML values could be used for malicious purposes.
  • Administrators should assess the risk of exploitation attempts.
  • Users should review and sanitize any stored footer HTML values.

Technical summary

FileRise, a self-hosted web-based file manager, returns the stored branding.footerHtml value through the unauthenticated public site configuration API without server-side sanitization. The FileRise frontend already sanitizes this value before rendering it into the page, using an allowlist of simple footer tags and safe link handling. This issue is fixed in version 3.21.0. The vulnerability could potentially allow unsanitized footer HTML to be returned, posing a risk to users. Defenders should verify if stored footer HTML values could be used for malicious purposes and assess the risk of exploitation attempts.

Defensive priority

Administrators and users of FileRise should assess exposure and prioritize upgrading to version 3.21.0 or later to mitigate potential risks associated with unsanitized footer HTML.

Recommended defensive actions

  • Administrators should upgrade FileRise to version 3.21.0 or later.
  • Users should review and sanitize any stored footer HTML values.
  • Defenders should monitor for potential exploitation attempts.
  • Review compensating controls for exposed systems while remediation is scheduled and verified.
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details about the issue, but evidence is limited. The FileRise frontend already sanitizes the footerHtml value before rendering it into the page, using an allowlist of simple footer tags and safe link handling.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-69194 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-69194

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-69194 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-69194

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • FileRise: Unsanitized footerHtml in Public Site Config

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/69xxx/CVE-2026-69194.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://github.com/error311/FileRise/security/advisories/GHSA-rmwm-wq9g-583g

    Supplemental source - x_refsource_CONFIRM

  • Source reference

    Unverified legacy reference

    URL: https://github.com/error311/FileRise/commit/613fdb28ca25e6dcc9bdfa590757b53935fad8da

    Supplemental source - x_refsource_MISC

  • Source reference

    Unverified legacy reference

    URL: https://github.com/error311/FileRise/releases/tag/v3.21.0

    Supplemental source - x_refsource_MISC

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.