VYPR

MP-Manager

by MP Manager

CVEs (1)

  • CVE-2026-110235MedOct 13, 2026
    risk 0.36cvss 5.5epss —

    MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating…