CVE-2026-37065

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=...

CVE-2026-37065

Veno File Manager Project 4.4.9 is affected by an Arbitrary File Deletion vulnerability in the /vfm-admin/index.php endpoint (section=translations&action=update). An authenticated attacker with the superadmin role can send a specially crafted POST request using the remove URL parameter to delete ...

CVE-2026-37065

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=...