Studio-42 elFinder vulnerabilities
6 published CVEs name Studio-42 elFinder among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-81891
elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)
Studio-42 · elFinder
High8.1 - CVE-2026-81890
elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections
Studio-42 · elFinder
Medium5.4 - CVE-2026-81889
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
Studio-42 · elFinder
High8.6 - CVE-2026-44521
elFinder: SQL Injection MySQL Volume Driver (elFinderVolumeMySQL)
Studio-42 · elFinder
High8.8 - CVE-2026-41247
elFinder: Command injection in resize background color parameter when using ImageMagick CLI
Studio-42 · elFinder
High8.9 - CVE-2021-32682
Multiple vulnerabilities leading to RCE
Studio-42 · elFinder
Critical9.8