CVE-2026-5482

CriticalCVSS 9.3

Published: 15/06/2026(UTC)Updated: 25/10/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

38th percentile - higher than 38% of all known CVEs

Summary

Responsive FileManager allows an unauthenticated attacker to upload files of any type and extension without restriction using the dialog.php endpoint, leading to Remote Code Execution.

Risk Assessment

Exploitation of this vulnerability may lead to serious security incidents, including an attacker gaining control over the system.

Recommendation

It is recommended to immediately update Responsive FileManager to the latest version or implement appropriate security measures to block file uploads by unauthorized users.

Other vulnerabilities in Responsive FileManager 9.14.0

CVE-2022-44276Critical
Responsive Filemanager < 9.12.0 allows an attacker to bypass upload restrictions, resulting in remote code execution (RCE).

Original NVD description (English source)

Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution. This project is unmaintained at the time of CVE assignment. The vulnerability was found in the latest release 9.14.0

Vulnerability data from NVD (NIST) · CISA KEV · EPSS