VYPR
Unrated severityOSV Advisory· Published Jan 13, 2026· Updated Apr 7, 2026

eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)

CVE-2023-54335

Description

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.