Threats tagged 'ghsa-6wpw-wr63-qhp5'

CVE-2026-116044 is a medium severity vulnerability in prasathmani TinyFileManager up to version 2.6. It involves an unrestricted file upload issue in the Remote URL File Upload Module within tinyfilemanager.php. This vulnerability allows remote attackers to upload files without restrictions. The exploit has been publicly disclosed, but there is no indication of active exploitation in the wild. The vendor has not responded to the disclosure, and no patch or official fix is currently available.