CVE-2026-114259

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-114259
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114259.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-114259
Published
2026-10-21T16:30:19Z
Modified
2026-10-22T02:49:12Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
oretnom23 file-management-system-php admin_class.php save_files unrestricted upload
Details

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-284",
        "CWE-434"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114259.json"
}
References

Affected packages

Git / github.com/oretnom23/file-management-system-php

Affected ranges

Type
GIT
Repo
https://github.com/oretnom23/file-management-system-php
Events
Introduced
2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4
Last Affected
2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4"
                },
                {
                    "last_affected":  "2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

Other
2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114259.json"