4 matches found
CVE-2026-37072
CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php An unauthenticated attacker can exploit a Local File Inclusion vulnerability in the 'lang' GET parameter. By sending a specially crafted POST request with t...
CVE-2026-37072
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php...
CVE-2026-37072
Veno File Manager Project 4.4.9 is vulnerable to an Incorrect Access Control flaw in admin-head-updates.php, specifically a Local File Inclusion via the lang GET parameter. An unauthenticated attacker can send a specially crafted POST request to corrupt the configuration file, then hit the setup ...
