CVE-2026-114262

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-284
• CWE-434

• https://github.com/MomoTommy/file-management-system/issues/2
• https://vuldb.com/cve/CVE-2026-114262
• https://vuldb.com/submit/1018614
• https://vuldb.com/vuln/424694
• https://vuldb.com/vuln/424694/cti

Published

Oct 21, 2026

Last Modified

Oct 21, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114257A security vulnerability has been detected in oretnom23 file…7.3
• CVE-2026-114258A vulnerability was detected in oretnom23 file-management-sy…7.3
• CVE-2026-114259A flaw has been found in oretnom23 file-management-system-ph…7.3
• CVE-2026-11426The UnderConstructionPage PRO plugin for WordPress is vulner…6.5
• CVE-2026-114260A vulnerability has been found in oretnom23 file-management-…6.5
• CVE-2026-114261A vulnerability was found in MomoTommy file-management-syste…7.3
• CVE-2026-114263A vulnerability was identified in ProjectWorlds Advanced Lib…7.3
• CVE-2026-114264A security flaw has been discovered in ProjectWorlds Advance…4.7
• CVE-2026-114265A weakness has been identified in ProjectWorlds Advanced Lib…6.3
• CVE-2026-114266A security vulnerability has been detected in ProjectWorlds …6.3
• CVE-2026-114267A vulnerability was detected in SourceCodester Food Order Ma…7.3
• CVE-2026-114268A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affecte…9.9