PT-2026-24149 · Unknown+1 · File Manager+1

Rusi-Sec · Publicado 2026-03-09 · Atualizado 2026-03-13 · CVE-2026-30919

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions facileManager versions prior to 6.0.4

Description facileManager is a suite of web applications designed for system administrators. A stored cross-site scripting (XSS) issue exists in the fmDNS module. This type of attack occurs when an application receives data from an untrusted source and includes it in HTTP responses without proper sanitization. Stored XSS, also known as persistent or second-order XSS, allows malicious scripts to be stored on the target server and executed by other users.

Recommendations Update to version 6.0.4 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-30919

GHSA-2339-H9QW-Q6VF

Produtos afetados

File Manager

Fmdns

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30919.json · Exploit
• https://github.com/facileManager/facileManager/security/advisories/GHSA-2339-h9qw-q6vf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-30919 · Aviso do Fabricante
• https://twitter.com/infoflowcloud/status/2031295592509432253 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2031294595888459922 · Publicação no Twitter
• https://t.me/CVEtracker/46954 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-30919 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2031446059336032758 · Publicação no Twitter
• https://t.me/cveNotify/155409 · Publicação no Telegram