CVE-2026-37266
High
Published: 28 May 2026
Published
28 May 2026
Modified
28 May 2026
KEV Added
—
Patch
—
CVSS Score
8.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-37266 is a high-severity PHP Remote File Inclusion (CWE-98) vulnerability in Csacyber (inferred from references). Its CVSS base score is 8.0 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the force_download.php component
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
- OWASP Top 10 Web 2025
Affected Products
Csacyber
—
inferred from references and description; NVD did not file a CPE for this CVE