HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-114259 — A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f1...

·Source: NIST NVD

Updated:

Executive Summary

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releas

Analysis

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet. CVSS Score: 7.3. Published: 2026-10-21T17:18:26.057.

Indicators of Compromise (2)

SHA-1 (1)
2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4
VirusTotalAnyRunJoe Sandbox
CVE (1)
CVE-2026-114259
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 21, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

CISO Problems That Can't Be Solved With Technology

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ciso-problems-that-cant-be-solved-technology-image_small-4-a-33248.jpg" align=right hspace=4><b>Operational Struggles and Arrogant Vendors Mean Tool Churn Is Likely to Continue</b><br>No matter how advanced or powerful cybersecurity tools become, they will never be able to fix many of the key problems that confront cyber defenders

Bank Info Security
LOWAi

Fake Anthropic AI previews lure in overeager employees

Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. New research from cybersecurity company Cofense describes a phishing campaign that hooks overeager enterprise users by making them think they are getting an invite to a private invite-only Anthropic preview. In reality, adversarial actors are trying to steal Google and Microsoft login credentials, exploi

CSO Online
MEDIUMVulnerability

Monzo launches in Spain

British digital bank has officially launched in Spain, marking its first move onto continental Europe.

Finextra