CVE-2026-119657

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserpermbyuid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...

CVE-2026-119657 FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserpermbyuid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...

CVE-2026-119657

FilePress versions up to and including 3.0.1 are vulnerable to a missing authorization flaw in the dzz/pichome/library component. The root cause is that the checkuserperm_by_uid function fails to verify specific library ownership, only checking if a user belongs to any library. This allows authen...

CVE-2026-119657 FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserpermbyuid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...

EUVD-2026-114073

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserpermbyuid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...

CVE-2026-119657: zyx0814 FilePress: FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated…

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserpermbyuid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...

PT-2026-133587

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserperm by uid only checks membership of any library. Attackers who know another library's appid or folder id can invoke...