PT-2026-24148 · Fmdns+1 · Fmdns+1

Rusi-Sec · Publicado 2026-03-09 · Atualizado 2026-03-13 · CVE-2026-30918

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions facileManager versions prior to 6.0.4

Description facileManager is a modular suite of web apps designed for system administrators. A reflected cross-site scripting (XSS) issue exists when the application processes data from an untrusted source and incorporates it into HTTP responses, potentially leading to security compromises. An attacker can inject malicious JavaScript code into a URL by including a script within a parameter. This vulnerability is present in the fmDNS module, specifically affecting the log search query parameter.

Recommendations Update to version 6.0.4 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-30918

GHSA-284F-MFF7-744X

Produtos afetados

File Manager

Fmdns

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30918.json · Exploit
• https://github.com/facileManager/facileManager/security/advisories/GHSA-284f-mff7-744x · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-30918 · Nota de Segurança
• https://t.me/cveNotify/155408 · Publicação no Telegram
• https://twitter.com/infoflowcloud/status/2031295645156295133 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-30918 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2031443499447382365 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2031294596777714072 · Publicação no Twitter
• https://t.me/CVEtracker/46953 · Publicação no Telegram