CVE-2026-37637

The CVE-2026-37637 issue affects Alexantr filemanager v1.0, specifically the filemanager.php upload endpoint. The root cause is unrestricted file uploads without proper validation, allowing a remote attacker to upload a PHP payload into a web-accessible directory and trigger execution via a brows...