Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown functionality of the file /filemanager.php?p= ajax=true&type=upload of the component File Upload Handler. This manipulation of the argument uploadurl causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-17 | 1 | General1 |
| 2026-04-19 | 1 | Disclosure1 |
CVE-2026-6497 A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown functionality of the file /filemanager.php?p= ajax… https://www.cve.org/CVERecord?id=CVE-2026-6497
Post summary
The statement announces CVE-2026-6497 in TinyFileManager and links to the official CVE record but provides no further technical or mitigation details.
CVE-2026-6497 Server-Side Request Forgery in prasathmani TinyFileManager Up to 2.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6497
Post summary
The content references CVE-2026-6497, a Server‑Side Request Forgery flaw in prasathmani TinyFileManager, but offers no additional details such as proofs of concept, exploitation evidence, or remediation guidance.