VYPR

File-Manager

by FossifyOrg

CVEs (1)

  • CVE-2026-110232LowOct 13, 2026
    risk 0.21cvss 3.3epss —

    Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../_x/file to create or overwrite…