https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:05:15.200305+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201462 EUVD-2026-201462 2026-10-06T07:05:15.255066+00:00 EUVD-2026-201462 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52306 fkie_cve-2024-52306 2026-10-06T07:05:15.255102+00:00

FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerability is fixed in 3.0.9.

 https://cve.radiocsirt.org/vuln/ghsa-8237-957h-h2c2 GHSA-8237-957h-h2c2 — FileManager Deserialization of Untrusted Data vulnerability 2026-10-06T07:05:15.255134+00:00

Affected: Packagist: backpack/filemanager

### Impact Deserialization of untrusted data from the `mimes` parameter could lead to remote code execution.

### Patches Fixed in 3.0.9

### Workarounds Not needed, a `composer update` will solve it in a non-breaking way.

### References Reported responsibly [Vladislav Gladkiy](https://github.com/catferq) at [Positive Technologies](https://www.ptsecurity.com/ww-en/).