CVE-2026-3266

CRITICAL 9.8CVE-2026-3266 · Published 03/03/2026 · updated 17/06/2026

Package	Affected versions	Patched versions
filr opentext	`< 25.1.3`	`25.1.3`

Description

Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs. This issue affects Filr: through 25.1.2.

References

portal.microfocus.com/s/article/KM000045579 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free