CVE-2026-37266
High · 8.0CVSS
8.0
EPSS
0.6%
Published
May 28, 2026
CISA due date
—
The record
An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the force_download.php component
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87927 MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and… CWE-98
- CVE-2026-15406 The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin… CWE-98
- CVE-2026-15667 The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin… CWE-98
- CVE-2026-11613 The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all… CWE-98
- CVE-2026-28150 Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions. CWE-98
- CVE-2026-66586 Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions. CWE-98
- CVE-2026-75963 The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all… CWE-98
- CVE-2026-73387 Unauthenticated Local File Inclusion in Resido <= 1.5 versions. CWE-98