SStudio-42

Products

Exploited and recent CVEs

• CVE-2026-81891 High 8.1 elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE) 0.9%
• CVE-2026-81890 Medium 5.4 elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections 0.2%
• CVE-2026-81889 High 8.6 elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback 0.5%
• CVE-2026-44521 High 8.8 elFinder: SQL Injection MySQL Volume Driver (elFinderVolumeMySQL) 0.2%
• CVE-2026-41247 High 8.9 elFinder: Command injection in resize background color parameter when using ImageMagick CLI 1.6%
• CVE-2021-32682 Critical 9.8 Multiple vulnerabilities leading to RCE 69.9%