5.3
Medium
CVE-2026-25005 Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager…
Description
Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Frontend File Manager 23.5 | earliest → 23.5 | No fix stated |
Other CVEs of Frontend File Manager
The 6 CVEs of Frontend File Manager →
CVE-2026-32577
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions
7.1
High
CVE-2025-64265
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting…
4.3
Medium
CVE-2025-57921
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting…
5.3
Medium
CVE-2025-27358
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File…
4.6
Medium