https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:24:19.903892+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-15087 EUVD-2026-15087 2026-10-05T17:24:19.906655+00:00 EUVD-2026-15087 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26960 fkie_cve-2022-26960 2026-10-05T17:24:19.906701+00:00

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.

 https://cve.radiocsirt.org/vuln/ghsa-7q88-jxvp-9gp2 GHSA-7q88-jxvp-9gp2 — Path Traversal in Studio-42 elFinder through 2.1.60 2026-10-05T17:24:19.906734+00:00

Affected: Packagist: studio-42/elfinder

`connector.minimal.php` in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.

 https://cve.radiocsirt.org/vuln/gsd-2022-26960 gsd-2022-26960 2026-10-05T17:24:19.906758+00:00 gsd-2022-26960