PT-2026-26650 · Unknown · File Thingie

Leefish + 1 · Publicado 2026-03-20 · Atualizado 2026-03-22 · CVE-2026-30580

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions File Thingie version 2.5.7

Description File Thingie version 2.5.7 is susceptible to a Directory Traversal issue. A malicious user can exploit the application's "create folder from url" functionality to read arbitrary files on the target system. The vulnerability involves manipulating the input to access files outside the intended directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-30580

Produtos afetados

File Thingie

Referências · 4

• 🔥 https://github.com/SpeWnz/Vulnerability-Research/tree/main/CVE-2026-30580 · Exploit
• https://github.com/leefish/filethingie · Nota
• https://twitter.com/CVEnew/status/2035627035565982084 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-30580 · Nota de Segurança