CVE-2026-34415 | thexerteproject xerteonlinetoolkits up to 3.13.0/3.14.0/3.15.0 elFinder Connector Endpoint incomplete blacklist (ID 1527)

April 22, 2026 Yanac

A vulnerability was found in thexerteproject xerteonlinetoolkits up to 3.13.0/3.14.0/3.15.0 and classified as critical. This affects an unknown function of the component elFinder Connector Endpoint. Such manipulation leads to incomplete blacklist.

This vulnerability is listed as CVE-2026-34415. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More