
CVE-2026-37071
Proof-of-concept exploit for CVE-2026-37071: arbitrary file rename in Veno File Manager 4.4.9 enabling privilege escalation to super administrator…
exploitationmisconfigurationprivilege-escalation+2

Proof-of-concept exploit for CVE-2026-37071: arbitrary file rename in Veno File Manager 4.4.9 enabling privilege escalation to super administrator…

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php

Proof-of-concept exploit for CVE-2026-37066: path traversal in Veno File Manager 4.4.9 enabling authenticated arbitrary file read via crafted HTTP…

Proof-of-concept exploit for CVE-2026-37068: arbitrary file write in Veno File Manager 4.4.9 via authenticated POST request to /vfm-admin/index.php.