SZB-67bb60816f
EUVD-2026-114248 reports file upload flaw in cak-filemanagement-system (CVSS 6.9)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Unknown (listed as 37954679)
- Product
- cak-filemanagement-system
- First seen
Summary
The EUVD listing says a vulnerability was found in the move_uploaded_file function of admin/add_logs.php in cak-filemanagement-system up to a specified commit. The vendor is listed only as a numeric ID, and the item is a feed post that does not confirm exploitation.
If you use Unknown (listed as 37954679)
Check whether you run cak-filemanagement-system and which commit is deployed
Restrict access to the admin area until a fix is confirmed
Watch the EUVD record for a patch or vendor response
What the sources say 1
· Mastodon: “A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297.” Source