CVE-2026-3266: Improper access control vulnerability has been discovered in OpenText™ Filr.

Q: What is the severity of CVE-2026-3266?

CVE-2026-3266 is considered a critical vulnerability due to its potential for authentication bypass and unauthorized access.

Q: How do I fix CVE-2026-3266?

To remediate CVE-2026-3266, update OpenText Filr to the latest version beyond 25.1.2 to ensure proper access controls are implemented.

Q: What software is affected by CVE-2026-3266?

CVE-2026-3266 affects OpenText Filr versions up to and including 25.1.2.

Q: Can unauthenticated users exploit CVE-2026-3266?

Yes, CVE-2026-3266 allows unauthenticated users to obtain XSRF tokens and execute remote procedure calls.

Q: What impact does CVE-2026-3266 have on systems?

The impact of CVE-2026-3266 includes the potential for unauthorized access, data leakage, and manipulation of the OpenText Filr system.

Published Mar 3, 2026

Updated

Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs.

This issue affects Filr: through 25.1.2.

Affected Software

2 affected components

OpenText Filr<=25.1.2

OpenText Filr<25.1.3

Remediation

Information

https://portal.microfocus.com/s/article/KM000045579?language=en_US

Event History

Mar 3, 2026

CVE Published

via MITRE·10:28 PM

Data Sourced

via MITRE·10:28 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Jul 22, 58183

Event

via NVD·09:56 AM

Frequently Asked Questions

What is the severity of CVE-2026-3266?

CVE-2026-3266 is considered a critical vulnerability due to its potential for authentication bypass and unauthorized access.

How do I fix CVE-2026-3266?

To remediate CVE-2026-3266, update OpenText Filr to the latest version beyond 25.1.2 to ensure proper access controls are implemented.

What software is affected by CVE-2026-3266?