CVE-2026-116044 | prasathmani TinyFileManager up to 2.6 Remote URL File Upload tinyfilemanager.php unrestricted upload

SecurityVulns
Yanac

A vulnerability, which was classified as critical, has been found in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrestricted upload.

This vulnerability is traded as CVE-2026-116044. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More