CVE-2026-114260

Name of the Vulnerable Software and Affected Versions oretnom23 file-management-system-php versions prior to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4

Description An issue exists in the AJAX Handler component within the ajax.php file. Remote manipulation of the ID argument in the delete folder() function allows for missing authentication, enabling an attacker to perform unauthorized actions remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the delete folder() function in the ajax.php file to minimize the risk of exploitation.