https://feed.craftedsignal.io/products/file-management-system-commit-dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 21:37:29 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-10-cve-2026-114262-file-management-system-unrestricted-upload/Wed, 21 Oct 2026 21:37:29 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cve-2026-114262-file-management-system-unrestricted-upload/A vulnerability in file-management-system (commit dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df) allows for unrestricted file upload via the FileController.php store function.A vulnerability was identified in the store function of app/Http/Controllers/FileController.php within the file-management-system repository (commit dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df). Manipulating the 'File' argument allows for unrestricted file uploads. The attack can be initiated remotely. The exploit has been publicly disclosed. The project uses a rolling release model, and no specific version information for affected or updated releases is available. The project was informed of the issue but has not yet responded.

]]>highadvisory