CVE Catalog
CVE-2026-39489
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk0.34%
25th percentile — higher than 25% of all known CVEs
Summary
In Download Monitor versions <= 5.1.9, there is a vulnerability that allows unauthorized users to download arbitrary files.
Risk Assessment
An attacker could exploit this vulnerability to access sensitive files, potentially leading to data leakage within the organization.
Recommendation
It is recommended to update Download Monitor to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Author Arbitrary File Download in Download Monitor <= 5.1.9 versions.