CVE-2026-37266

EPSS 0.33%
Veröffentlicht 28.05.2026 14:16:19
Zuletzt bearbeitet 29.05.2026 16:32:14
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the force_download.php component

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 0 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.249

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	8	2.1	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

https://csacyber.com/blog/responsive-filemanager-version-9-14-0-multiple-vulnerabilities-cve-2026-37266

https://www.responsivefilemanager.com/

https://nvd.nist.gov/vuln/detail/CVE-2026-37266

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-37266

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-37266

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-37266