CVE-2026-94618 | FileGator prior 7.15.0 Batch Download DownloadController.php batchDownloadStart uniqid access control

A vulnerability categorized as problematic has been discovered in FileGator prior 7.15.0. This vulnerability affects the function batchDownloadStart of the file backend/Controllers/DownloadController.php of the component Batch Download. Executing a manipulation of the argument uniqid can lead to improper access controls.

This vulnerability is registered as CVE-2026-94618. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More