CVE-2026-5482 Remote Code Execution via Unrestricted File Upload in Responsive FileManager

Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution. This project is unmaintained at the time of CVE assignment. The vulnerability was found in the latest release 9.14...

CVE-2026-5482

Responsive FileManager (unmaintained at CVE assignment) contains an unauthenticated unrestricted file upload flaw via the dialog.php endpoint in the latest release 9.14.0, enabling Remote Code Execution. Affected component: file upload handling/dialog.php. Impact reported as Remote Code Execution...

CVE-2026-5482

creationtimestamp| type| source ---|---|--- 2026-06-15 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-5482 2026-06-15 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116754364893455307 2026-06-15 13:30:28+00:00| seen|...