{"id":"CVE-2026-114262","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-114262","summary":"file-management-system FileController.php store unrestricted upload","details":"A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","published":"2026-10-21T17:15:14.707Z","modified":"2026-10-22T02:49:13.355392240Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114262.json"},{"type":"REPORT","url":"https://github.com/MomoTommy/file-management-system/issues/2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114262"},{"type":"ADVISORY","url":"https://vuldb.com/cve/CVE-2026-114262"},{"type":"ADVISORY","url":"https://vuldb.com/submit/1018614"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/424694"},{"type":"REPORT","url":"https://vuldb.com/vuln/424694/cti"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-22T02:49:13.355392240Z"}}