Skip to content
Threat Feed

Product

FilePress (<= 2.2.0)

1 brief RSS
high advisory

zyx0814 FilePress SQL Injection Vulnerability (CVE-2026-8133)

A remote SQL injection vulnerability (CVE-2026-8133) exists in zyx0814 FilePress up to version 2.2.0 via the Shares Filelist API by manipulating the argument order, potentially leading to unauthorized data access or modification.

FilePress sql-injection vulnerability web-application
2r 1t 1c