CVE-2026-51027 is a critical vulnerability affecting FileThingie v2.5.7. It involves the ft2.php component, which can be exploited remotely by an attacker with low privileges to gain unauthorized access to sensitive information. The vulnerability has a CVSS 3.1 base score of 9.9, reflecting high attack complexity, network attack vector, and significant impact on confidentiality, integrity, and availability with scope change. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows a remote attacker with low privileges to obtain sensitive information from the affected system. The vulnerability impacts confidentiality, integrity, and availability, and the scope of the impact extends beyond the vulnerable component. This can lead to significant compromise of the affected system and data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable component and monitor for suspicious activity related to ft2.php. Avoid exposing the vulnerable version to untrusted networks.