CVE-2026-37067 - Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request. - 漏洞详情

漏洞编号：CVE-2026-37067

风险等级：未知

漏洞来源：CVE

CVE 编号：CVE-2026-37067

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：-

发布/更新时间：2026-08-27 / 2026-08-27

漏洞描述

Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request.

CVE-2026-37067 - Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request. - 漏洞详情

漏洞描述

相关链接