FM
Product
File Manager
7
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add File Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17540 | 8.8 | Aug 10 | Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch Affected: before 6.9.1 |
| CVE-2026-85081 | 7.5 | Sep 26 | Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass Affected: before 8.0.5 |
| CVE-2026-17542 | 7.5 | Aug 10 | Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector Affected: before 6.9.1 |
| CVE-2026-17541 | 7.5 | Aug 10 | Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure Affected: before 6.9.1 |
Showing 4