Advisories · Technology

Advanced File Manager.

Every CVE that names Advanced File Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-79627 CVE record

CVSS 7.1 High

Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass
- Advanced File Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2026
CVE-2026-11565 CVE record

CVSS 8.5 High

Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui
- Advanced File Manager
Not analysed yet 19 Aug 2026
CVE-2026-6382 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Multiple elFinder Plugins - Authenticated OS Command Injection
- FileOrganizer
- Advanced File Manager
Not analysed yet 6 Jul 2026
CVE-2023-3814 CVE record

CVSS 4.9 Medium

Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
- Advanced File Manager
Not analysed yet 4 Sept 2023