Security Advisory

CVE-2026-72593

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 10:41:54

Last updated 2026-08-10 13:25:34

Assigner TuranSec

CVSS score not scored

State PUBLISHED

Description

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem.

← Browse all CVEs View on cve.org ↗