https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T20:57:02.488642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-02566 cnvd-2018-02566 2026-10-20T20:57:02.491785+00:00 cnvd-2018-02566 https://cve.radiocsirt.org/vuln/euvd-2026-164606 EUVD-2026-164606 2026-10-20T20:57:02.491816+00:00 EUVD-2026-164606 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000490 fkie_cve-2017-1000490 2026-10-20T20:57:02.491831+00:00

Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.

 https://cve.radiocsirt.org/vuln/ghsa-qpgw-2c72-4c89 GHSA-qpgw-2c72-4c89 — Mautic users able to download any files from server using filemanager 2026-10-20T20:57:02.491857+00:00

Affected: Packagist: mautic/core

### Impact Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.

### Patches Update to 2.12.0 or later.

### Workarounds None

### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)

 https://cve.radiocsirt.org/vuln/gsd-2017-1000490 gsd-2017-1000490 2026-10-20T20:57:02.491889+00:00 gsd-2017-1000490