CVE-2026-81890
1 advisory.
Packagist/studio-42/elfinder CVE-2026-81890: medium 5.4
elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections
Action: Upgrade studio-42/elfinder to 2.1.70 or later.
composer require studio-42/elfinder:2.1.70Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.70 | - |
Fixed versions
| 2.1.70 |
Sources
- osv: GHSA-9hjf-w35w-6vx2
- https://github.com/Studio-42/elFinder/security/advisories/GHSA-9hjf-w35w-6vx2
- https://nvd.nist.gov/vuln/detail/CVE-2026-81890
- https://github.com/Studio-42/elFinder/commit/31284facd033e081b2b69c08873b39c8a413b762
- https://github.com/Studio-42/elFinder/commit/36d40fff12222ad4c229d8889d8ed3fd3dbf0415
- https://github.com/Studio-42/elFinder
- https://github.com/Studio-42/elFinder/releases/tag/2.1.70
CVE-2026-81890 · published · modified · JSON