CVE Catalog

CVE-2026-51026

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.85%

54th percentile - higher than 54% of all known CVEs

Summary

A directory traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request.

Risk Assessment

An attacker can read system files or configuration data, leading to leakage of sensitive information and potential attack escalation.

Recommendation

Immediately update FileThingie to the latest available version and restrict access to the application using a firewall or access control lists.

Other vulnerabilities in FileThingie

Original NVD description (English source)

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS