https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T22:46:08.293788+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-37073 fkie_cve-2026-37073 2026-11-05T22:46:08.294726+00:00

Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header.

 https://db.gcve.eu/vuln/ghsa-hjrq-vr7r-m27p GHSA-hjrq-vr7r-m27p 2026-11-05T22:46:08.294775+00:00

Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header.