Veille CVE

Recherche « aleksey-hoffman Sigma File Manager »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « aleksey-hoffman Sigma File Manager » ✕
  1. CVE-2026-111936 4.3 Moyenne

    aleksey-hoffman Sigma File Manager

    Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud metadata addresses to read internal responses via files written to the extension directory.