What’s Vulnerable › Products

File Manager vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your File Manager version is affected

Latest File Manager vulnerabilities

• CVE-2026-85081 — Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass (CVSS 7.5)
• CVE-2026-19708 — File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure (CVSS 5.9)
• CVE-2026-17542 — Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector (CVSS 7.5)
• CVE-2026-17541 — Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure (CVSS 7.5)
• CVE-2026-17540 — Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch (CVSS 8.8)
• CVE-2026-6382 — Multiple elFinder Plugins - Authenticated OS Command Injection (CVSS 9.1)