Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents (without changes being applied to the files' database-resident metadata) and / or upload new files, with arbitrary content and extensions, which won't show up in the Directus UI. This vulnerability is fixed in 11.9.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-22 | 1 | Disclosure1 |
| 2026-03-23 | 1 | PoC1 |
| 2026-04-05 | 1 | Disclosure1 |
| 2026-06-10 | 1 | PoC1 |
| 2026-07-23 | 1 | Disclosure1 |
DAY 69/365 If your target is running Directus < 11.9.3, it's likely vulnerable to ( CVE-2025-55746 ) https://t.co/zwauMPSu8Y
Post summary
The tweet indicates that Directus versions below 11.9.3 are likely vulnerable to CVE‑2025‑55746, with no further technical or exploit details provided.
site:com[us|eu|ru|...] "We're sorry but Directus doesn't work" -github -gitlab -google https://pcacybersecurity.com/resources/advisory/directus-cve-2025-55746 HTTP request PoC ( https://github.com/4osp3l/Directus-CMS-PII-Leak )
Post summary
The advisory points to a PoC for CVE‑2025‑55746 in Directus, providing a GitHub link, but offers no active exploitation evidence, patches, or technical details.
@0x7hierri Check for CVE-2025-55746 on /files ( arbitrary file overwrite ). You can find the HTTP Post request below https://github.com/4osp3l/Directus-CMS-PII-Leak
Post summary
The tweet announces CVE-2025-55746 and shares a GitHub link containing an HTTP POST request that demonstrates an arbitrary file overwrite vulnerability, but offers no exploitation code, patch, or active attack evidence.
🚨 CVE-2025-55746 - critical 🚨 Directus - Unauthenticated File Modification > Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify... 👾 https://cloud.projectdiscovery.io/library/CVE-2025-55746 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE-2025-55746 as a critical vulnerability in Directus, allowing unauthenticated file modification on affected versions, and points to a Project Discovery library for more details.
🔴 Directus, TUS Resumable Upload Permission Bypass, #CVE-2025-55746 (Critical) https://dailycve.com/directus-tus-resumable-upload-permission-bypass-cve-2025-55746-critical/
Post summary
The tweet announces the discovery of a critical permission bypass in Directus' TUS Resumable Upload feature, referencing CVE-2025-55746.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | monospace | directus | - | node.js | - |