CVE-2026-37072

CVSS 9.8 (critical) · published 2026-08-27

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.

Weakness: CWE-284

Source: NVD CVE-2026-37072

References

• http://veno.com
• https://github.com/jfs-jfs/CVE-2026-37072

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.