CVE-2026-82543
High
Description
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 2.5.0 is able to resolve this issue. The patch is named 8d7d856c62d73badd0797eb4daec8d2ff10a403a. Upgrading the affected component is recommended.
SeverityHigh
CVSS7.3
Exploit probability—
ProductVastsa Filecodebox
PublishedAug 30, 2026
First seenAug 30, 2026
Weakness typeCWE-362Race condition
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vastsa filecodebox | 2.0, 2.1, 2.2, 2.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.