CVE-2026-30919Disclosure(facilemanager / facilemanager)

LOWCVSS 5.4 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch facilemanager facilemanager systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS (also known as persistent or second-order XSS) occurs when an application receives data from an untrusted source and includes that data in its subsequent HTTP responses in an unsafe manner. This vulnerability was found in the fmDNS module. This vulnerability is fixed in 6.0.4.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • facilemanager

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Products
facilemanager

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-10: 3Patch / Workaround · 2026-03-10: 1Technical Details · 2026-03-10: 303-10
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-30919 Stored XSS Vulnerability in facileManager fmDNS Module Before 6.0.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30919

    Post summary

    The post announces a stored XSS vulnerability in facileManager's fmDNS module (prior to v6.0.4) and points to a Vulmon record, but offers no PoC, exploit code, patch, or active exploitation details.

    0001028
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-30919 facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS (also known as persistent or second-order XSS) occurs when a… https://www.cve.org/CVERecord?id=CVE-2026-30919 ----- Traducción: CVE-2026-30919 fac… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-30919 in facileManager (prior to 6.0.4), highlighting a stored XSS flaw, but provides no PoC, exploit, patch, or active exploitation details.

    0000035
    57 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-30919 facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS (also known as persistent or second-order XSS) occurs when a… https://www.cve.org/CVERecord?id=CVE-2026-30919

    Post summary

    CVE-2026-30919 is a stored XSS vulnerability in facileManager prior to version 6.0.4, with the patch implied in the newer release.

    00000232
    56.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfacilemanagerfacilemanager---

Explore more