Back to overview

CVE-2026-51026

MEDIUM Exploitation: PoC
6.5
CVSS 3.1
Description
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request.

Metadata

CVE ID
CVE-2026-51026
State
PUBLISHED
Assigner
mitre
Reserved
2026-06-07 00:00 UTC
Published
2026-07-20 00:00 UTC
Last updated
2026-07-20 18:19 UTC
Primary CWE
CWE-23
CWE-23 Relative Path Traversal
Vendor / Product
n/a / n/a
Sources
cve.org  ·  NVD

Severity & Metrics

6.5 MEDIUM CVSS 3.1
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N
SSVC — CISA Coordinator
Exploitation
PoC
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
n/a n/a n/a
Weakness (CWE)
CWESourceDescription
cna n/a
CWE-23 adp CWE-23 Relative Path Traversal
CVSS scores (1)
ScoreSeverityVersionSourceVector
6.5 MEDIUM 3.1 cna CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N
Back to overview