Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file[] results in path traversal. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-6496 A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler… https://www.cve.org/CVERecord?id=CVE-2026-6496
Post summary
A brief notification that CVE-2026-6496 was found in TinyFileManager, specifying the affected file but providing no further technical details.
CVE-2026-6496 Path Traversal in Prasathmani TinyFileManager Up to 2.6 POST Parameter Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6496
Post summary
A brief disclosure of CVE-2026-6496 identifies a Path Traversal vulnerability in Prasathmani TinyFileManager versions up to 2.6, specifying the affected component but providing no exploit, patch, or active exploitation details.