
CVE-2026-37072
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php
authentication-authorizationexploitationmisconfiguration+3

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php

Proof-of-concept exploit for CVE-2026-37071: arbitrary file rename in Veno File Manager 4.4.9 enabling privilege escalation to super administrator…

Proof-of-concept exploit for CVE-2026-37068: arbitrary file write in Veno File Manager 4.4.9 via authenticated POST request to /vfm-admin/index.php.

Proof-of-concept exploit for CVE-2026-37066: path traversal in Veno File Manager 4.4.9 enabling authenticated arbitrary file read via crafted HTTP…

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion