Veno-File-Manager

Veno File Manager Unauthenticated User Enumeration (CVE-2026-37064) newCVE-2026-37064webMEDIUMUnverified2026-07-05Veno File Manager Path Traversal to Arbitrary File Read (CVE-2026-37066) newCVE-2026-37066webHIGHUnverified2026-07-05Veno File Manager Incorrect Access Control — Application Log Extraction (CVE-2026-37067) newCVE-2026-37067webMEDIUMUnverified2026-07-05Veno File Manager Arbitrary PHP File Overwrite (CVE-2026-37068) newCVE-2026-37068webCRITICALUnverified2026-07-05Veno File Manager Arbitrary File Deletion (CVE-2026-37065) newCVE-2026-37065webHIGHUnverified2026-07-05Veno File Manager Absolute Path Disclosure (CVE-2026-37069) newCVE-2026-37069webLOWUnverified2026-07-05Veno File Manager 4.4.9 — Unauthenticated LFI to Superadmin Takeover (CVE-2026-37072) newCVE-2026-37072webCRITICALUnverified2026-07-05Veno File Manager 4.4.9 — Unauthenticated Email Hijack via SMTP Relay (CVE-2026-37073) newCVE-2026-37073webMEDIUMUnverified2026-07-05Veno File Manager 4.4.9 — Authenticated Arbitrary File Read (CVE-2026-37070) newCVE-2026-37070webMEDIUMUnverified2026-07-05Veno File Manager 4.4.9 — Arbitrary File Rename to Privilege Escalation (CVE-2026-37071) newCVE-2026-37071webHIGHUnverified2026-07-05