CVE-2026-6496

The CVE concerns prasathmani TinyFileManager (up to v2.6). The vulnerable component is the POST Parameter Handler in /filemanager.php, where manipulating the file[] argument enables a path traversal. The issue is remote-exploitable and an exploit has been published. Impact is limited to path trav...