Ghostwire

CVE-2026-6057: FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows...

CRITICAL CVSS 9.5 EPSS 0.09% Exploit Available

Published: April 10, 2026 | Last Modified: April 10, 2026

Description

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution.

Ghostwire Analysis — What This Means Practically

Exploitation Probability (EPSS): Low — 0.09% (25th percentile)

Low exploitation probability based on current threat landscape data. Standard patching timeline is appropriate.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References