Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally grants access and allows listing, reading, writing, and deleting files exposed by the FTP server. The MiCode/Explorer open source project has reached end-of-life status.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-11 | 2 | Disclosure2 |
| 2026-05-11 | 4 | Disclosure4 |
https://lyrie.ai/research/research/cve-2026-29515-xiaomi-fileexplorer #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The tweet points to a research article announcing CVE‑2026‑29515 for Xiaomi FileExplorer but provides no further details or evidence of exploitation.
CRITICAL: CVE-2026-29515 (CVSS 9.8) — xiaomi fileexplorer. CVE: CVE-2026-29515 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post announces the critical CVE-2026-29515 affecting Xiaomi File Explorer, noting its CVSS score and severity, but provides no exploits, patches, or claims of active use.
CVE: CVE-2026-29515 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers…
Post summary
The advisory discloses an authentication bypass vulnerability in MiCode FileExplorer’s embedded SwiFTP FTP server component, rated CVSS 9.8 and critical severity, potentially permitting network attackers unrestricted access.
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-29515 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
This advisory confirms CVE‑2026‑29515 as a critical vulnerability with a CVSS 9.8 score, but it provides no PoC, exploit code, active exploitation evidence, or patch information.
CVE-2026-29515 MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid … https://www.cve.org/CVERecord?id=CVE-2026-29515
Post summary
CVE-2026-29515 is an authentication bypass vulnerability in MiCode FileExplorer’s embedded SwiFTP FTP server component, enabling network attackers to log in without valid credentials.
🚨 CVE-2026-29515: MiCode FileExplorer SwiFTP Serve... SwiFTP's PASS handler grants access to any credentials - network-accessible file server with zero authentication is eve... https://zerodaysignal.com/vulnerability/CVE-2026-29515 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
CVE-2026-29515 is disclosed as a vulnerability in SwiFTP allowing unauthorized credential access via the PASS handler, with no defenses or exploitation evidence reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xiaomi | fileexplorer | - | - | - |