Login Request a demo
FM
Product
File Manager
by · last CVE Sep 26, 2026
7
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 4Medium 2Low 0
Severity
All severities7Critical1High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add File Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-6382
9.1
1%
Jul 6
Multiple elFinder Plugins - Authenticated OS Command Injection
Affected: before 8.0.4
CVE-2026-17540
8.8
2%
Aug 10
Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch
Affected: before 6.9.1
CVE-2026-85081
7.5
0%
Sep 26
Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
Affected: before 8.0.5
CVE-2026-17542
7.5
0%
Aug 10
Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector
Affected: before 6.9.1
CVE-2026-17541
7.5
0%
Aug 10
Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
Affected: before 6.9.1
CVE-2023-5907
6.5
1%
Dec 11
File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
Affected: before 6.3
CVE-2026-19708
5.9
0%
Sep 26
File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure
Affected: 7.2.2 before 8.0.5
Showing 7