CVE-2026-29909

MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...

CVE-2026-29909

creationtimestamp| type| source ---|---|--- 2026-03-27 03:00:09+00:00| published-proof-of-concept| Telegram/rhvNMhDEQsDmbO42lBM1UZ6liv8Ut69COJccPHJCHHT9EeA 2026-08-27 15:00:11+00:00| seen| https://t.me/cve0day/317 2026-08-28 00:00:39+00:00| seen| https://t.me/cve0day/317 2026-08-29 00:00:31+00:00...