
CVE-2026-37065
Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion
exploitationpenetration-testingred-teaming+2

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion
Proof-of-concept exploit for CVE-2026-37071: arbitrary file rename in Veno File Manager 4.4.9 enabling privilege escalation to super administrator…

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php

Proof-of-concept exploit for CVE-2026-37066: path traversal in Veno File Manager 4.4.9 enabling authenticated arbitrary file read via crafted HTTP…

Proof-of-concept exploit for CVE-2026-37068: arbitrary file write in Veno File Manager 4.4.9 via authenticated POST request to /vfm-admin/index.php.