CVE Catalog
CVE-2026-51027
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk0.34%
27th percentile - higher than 27% of all known CVEs
Summary
An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component.
Risk Assessment
The organization is at risk of sensitive data leakage, such as passwords, keys, or configurations, which could lead to further attacks and security breaches.
Recommendation
Immediately update FileThingie to the latest available version and restrict access to the ft2.php component using firewall rules or authentication.
Original NVD description (English source)
An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component.