vastsa CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH vastsa CVE published 2026-07-20

CVE-2026-64619

CVE-2026-64619 is a high-severity vulnerability in FileCodeBox versions prior to 2.4, allowing unauthenticated attackers to bypass rate limiting by spoofing IP addresses via X-Real-IP and X-Forwarded-For headers. This enables enumeration of share codes and unauthorized access to users' files. The vulnerability has a CVSS score of 8.7 and is considered high severity.