CVE-2021-39433: Biqs Biqsdrive

High severity, CVSS 7.5. EPSS: 8.7% chance of exploitation in the next 30 days.

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.

Affected products

• Biqs Biqsdrive: up to and including 1.83

Published 2021-10-04. Last modified 2026-06-17.