CVE-2026-110232 in File Managerinfo

Summary

by MITRE • 10/13/2026

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../<name>_x/file to create or overwrite files in sibling folders when a user extracts the archive.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

VulnCheck

Reservation

10/13/2026

Disclosure

10/13/2026

Moderation

accepted

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-110232
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-110232
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-110232/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!