End User Forum

Hi, store regulated customer documents in Box and need a written statement from Box Security for our vendor risk file regarding today’s PHP remote code execution vulnerabilities ( CVE-2026-109618 and CVE-2026-109619 ). Specifically:Does any component in Box’s service delivery path (upload handling, API, web application) run the PHP runtime (php-src, as opposed to HHVM)?   If so, has it been patched to the versions PHP released on October 21, and when was that completed?   Has Box identified any indication of exploitation attempts against its infrastructure prior to patching?A short written response would be appreciated. If Box has published or will publish a public advisory, a link to that is sufficient for questions 1 and 2. References:https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://www.php.net/archive/2026.php#2026-10-20-1 https:/

Just new and learning about box

Can access policies in Azure be created to only allow FedRAMP box accounts and block other accounts?

This link is brokenhttps://ucsf.box.com/s/<removedinformation>

Hi everyone,I have a question about Box permissions.I am an external user who receives access to Box content from multiple clients. I do not manage the Box environments or permission settings myself. I am simply the recipient of access that has been granted by different clients.Because multiple clients have shared content with the account I use, I can see folders and files from several different clients when I log in.My understanding is that I can see these folders only because they have been explicitly shared with my account.What I would like to confirm is whether those clients can see each other's content. For example, if both Client A and Client B share folders with the same external user account, can Client A see Client B's folders or files in any way without being explicitly granted access?Or are all folders and files isolated by permissions so that each client can only see the content shared directly with them?Thank you in advance for your help.

External partners can no longer open a Box folder I share with third parties outside my organization through a password-protected shared link. Until recently, they could open the link. Now the link redirects them to our enterprise Island Browser (which they have access to). Any suggestions?

I started the Box Certified Admin course, but it only allows you to complete the first module.  Does not continue where you left off, etc.  Disappointing  

I am unable to receive any 2FA codes to my email. It is the correct email but have not been getting anything even in my SPAM or junk email. What can I do to get into my account?

I want to know if creating this workflow is even possible? I am running into many roadblocks1) check google calendar for event which triggers an automatic email reminder to vendor for COI renewal request 2) send email request or link request to vendor to upload the requested COI renewed file onto the website 3) if the file isn't uploaded in a week, send an email reminder to follow up 4) if the file is uploaded within a week, don't need to follow up with the vendor but checks for COI accuracy 5) email the insurance agent for verification of the COI that it's real<moderator note: title has been updated>

Box seems committed to the same path as other cloud service providers, ensuring the customer is dependant on the cloud and phasing out features that give users access to their own files. Apple did the same with Photos, etc. Such is life. So with the imminent departure of Box Sync, how are folks thinking about the future of file sync services? Are you willing to go with the flow and adapt to Drive? Or holding on to maintain Sync behaviour as long as possible? Or looking to other providers (or even DIY) that still provide user friendly options?

How do I download an excel spreadsheet (xlsx) without box automatically converting it into a PDF? I did not request a PDF. My client gave me permission to download everything so I can modify files, yet it is ridiculously hard to download anything. On top of auto-converting, the website only allows me to download one document at a time instead of selecting multiple files for download. 

I had sent an email inquiry, but since I haven’t received a reply, I’m leaving this message. ( [removed by moderator] )We are a Korea-based manufacturing company with approximately 500 employees and overseas subsidiaries in the United States, Vietnam, and India. In order to establish an integrated data management system across our global subsidiaries, we are currently reviewing the adoption of the BOX platform.Before officially implementing BOX company-wide, we would like to explore its various features and assess how best to utilize them. Therefore, we would like to inquire whether it is possible to receive a trial period of free usage for evaluation purposes.The plan we are considering is the Enterprise version.and, We would also like to ask about data retention after subscription use. If we use the Enterprise plan for one month and then decide not to continue, will the folders and data stored/used during that month be retained for a certain period of time? Or will they be deleted im

Media & Entertainment Industry BriefDate range: 8–14 September 2026AI is moving from experimentation toward licensed creation, measurable media transactions and stronger integrity controls—while advertisers continue shifting investment toward CTV, social and commerce media. Music industry tightens controls on AI-generated streaming fraudConfirmed: The Financial Times reports that music companies and distributors have agreed new rules aimed at preventing AI-generated tracks and bot activity from diverting royalties. Reported measures include rights verification, infringement checks, action against repeat offenders and information sharing. Deezer has reported that more than half of new uploads in July were AI-generated, with a large proportion of related streams assessed as fraudulent.Why it matters: Trust in streaming metrics, royalty allocation and recommendation systems is becoming a core operating issue. Practical question: what provenance, anomaly-detection and rights evidence s

Quick disclosure: I work at Box as a Scaled Customer Success Manager, and a big part of my job is helping customers get value out of Box AI. Obvious bias. I'm going to argue against it in places.Here's the pattern I keep seeing.Someone opens AI Home for the first time and types in a filename. Or a client name. Or "Q3 pricing deck." They get back a conversational response instead of the file they wanted, quietly go back to the search bar, and never open it again.That's a framing problem, and I think we created it — Box people, admins, champions — by talking about AI Home as an upgrade to search.It isn't. It's a different tool that happens to search as one of its steps.The question that resolves it: do I need a file, or do I need an answer?Search is retrieval. It returns a set of things you can sort, filter, and act on. AI Home is reasoning. It reads across your content and produces a response.Sort the task into one of those buckets and the choice stops being much of a debate. First, the

I purchased a new I-Phone 17 and I lost all authenticator links in my OKTA app during re-configuration.I need a new QR code to re-establish such link in OKTA authenticator.EMAIL: <removed personal information>BOX ACCOUNT USER GROUP:   NSTXL MACH_XL 

This started a couple of weeks ago.  Search on box.com or using the Box Drive App does not work.  Finder on my Box Sync Folder works just fine and I can use this in the interim.   When using the native Box search, the moment that I type more than two letters in the search box, it states that there is no results. If I click on a subfolder I have better luck sometimes but it is not consistent. I have already checked for unsync'ed files and reset Box Drive on my mac and I still have the same results.  

Hi ,I Currently have a requirement but need any native solution or approach for the requirement.Currently if we edit a file in Box its saving as a new version. We need the user to Find the difference between the versions that what changes were made between the versions . Box AI cant see the previous versions and compare .Any Ideas would be helpful !

I'm currently trying to find all the PDFs containing HVWS70, but Box isn't working very well. I have several files in folders that contain that information, but it can't find them. Could it be due to a recent update, and now Box can't find them unless I specify the full title of my documents? Because it was working perfectly just a few days ago.

Having a really tough time troubleshooting an issue where ANY change to a Box hub throws “Failed to save hub.” when attempting to save. This just started happening 6 days ago and I can not find ANY information on this. At best AI and the articles mostly suggest to contact support if basic troubleshooting fails.  Problem is that I have no idea how to get in contact with Box’s actual support team from within the website. 

Does anyone know if there is a way to allow folder uploads via a File Request?many thanks. :) 

I tried to restore a folder that been removed by accident, but only 50% of the files restored successfully, is there any way to restore the rest? Thanks

Hello - What settings in the Admin console will disable account creation when I share links with users? Each time i create a link, it requires the user to create a box account. I do not want that. I want them to click on the link and be able to access, view, edit the folder in question. How can i accomplish this?

When in a Boxnote, the three dots used to offer the option of going back to the main folder that the note lived as the first option. We eventually found it under “save location” (which is counterintuitive as this language suggests you would use this to “save the note in a new location” or maybe save the location of the note as in the form of a link or something).The menu now has so many options that we would never use - it is frustrating to lose the one we did use.   Does anyone have a quicker way to go to the main folder from within a Boxnote now? 

I’m the Box Admin, one of our enduser is new to the BOX and we have gave her all the permissions to upload new files but her New is greyed out and she is receiving You do not have permission to upload or create items error. 

Please, please, please, bring back the former preview header where it showed what folder it moved to. Now it shows “Updated… with the date the file was created.” This is frustrating when you need to make sure that you moved went to where you intended in case you made an error and moved it somewhere else. It was also very helpful when it showed what folder it moved to, in case you needed to open another tab to go to that folder without having to go through the hassle of navigating to it from a new browser tab. This Updated and remaining in the state is a big setback to this program. If anyone knows a way to make it show what it used to I’d really love to know how to do it! And put the old close button on the right side back!