PT-2026-24149 · Unknown+1 · File Manager+1

Rusi-Sec · Published 2026-03-09 · Updated 2026-03-13 · CVE-2026-30919

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions facileManager versions prior to 6.0.4

Description facileManager is a suite of web applications designed for system administrators. A stored cross-site scripting (XSS) issue exists in the fmDNS module. This type of attack occurs when an application receives data from an untrusted source and includes it in HTTP responses without proper sanitization. Stored XSS, also known as persistent or second-order XSS, allows malicious scripts to be stored on the target server and executed by other users.

Recommendations Update to version 6.0.4 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-30919

GHSA-2339-H9QW-Q6VF

Affected Products

File Manager

Fmdns

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30919.json · Exploit
• https://github.com/facileManager/facileManager/security/advisories/GHSA-2339-h9qw-q6vf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-30919 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30919 · Security Note
• https://twitter.com/infoflowcloud/status/2031295592509432253 · Twitter Post
• https://twitter.com/CVEnew/status/2031294595888459922 · Twitter Post
• https://t.me/CVEtracker/46954 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2031446059336032758 · Twitter Post
• https://t.me/cveNotify/155409 · Telegram Post