CVE-2026-37065

CVSS 9.1 (critical) · published 2026-08-27

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.

Weakness: CWE-552

Source: NVD CVE-2026-37065

References

• http://veno.com
• https://github.com/jfs-jfs/CVE-2026-37065
• https://github.com/jfs-jfs/CVE-2026-37065

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.