CVE-2026-119653

Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autocompletepath endpoint. Low-privileged users without file-manager permission can supply arbitrary paths in the query...

CVE-2026-119653 Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path

Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autocompletepath endpoint. Low-privileged users without file-manager permission can supply arbitrary paths in the query...

CVE-2026-119653 Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path

Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autocompletepath endpoint. Low-privileged users without file-manager permission can supply arbitrary paths in the query...

CVE-2026-119653

The Nging through 5.3.5 application is vulnerable to an information disclosure vulnerability due to missing authorization. Authenticated backend users can abuse the public-tagged /user/autocomplete_path endpoint to list host directories. By supplying arbitrary paths in the query parameter, low-pr...

EUVD-2026-114069

Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autocompletepath endpoint. Low-privileged users without file-manager permission can supply arbitrary paths in the query...

CVE-2026-119653: admpub nging: Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list…

Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autocompletepath endpoint. Low-privileged users without file-manager permission can supply arbitrary paths in the query...