PT-2026-40942 · Givanz · Vvveb

Basant Kumar + 1 · Publicado 2026-05-14 · Atualizado 2026-05-14 · CVE-2026-41933

NVD

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multiple paths lacking proper index directives in .htaccess files. Attackers can access directories such as admin asset paths, plugins, themes, and media folders to view filenames, file sizes, modification timestamps, and unrendered admin templates containing sensitive route maps.

Correção

Enumeração de Fraquezas

CWE-548

Identificadores relacionados

CVE-2026-41933

Produtos afetados

Vvveb

Referências · 4

• https://github.com/givanz/Vvveb/commit/96ae04c5e4a295e281adc1d02d77444173653deb · Correção
• https://github.com/givanz/Vvveb/releases/tag/1.0.8.3 · Nota
• https://vulncheck.com/advisories/vvveb-directory-listing-information-disclosure · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-41933 · Nota de Segurança