Browse all 6 CVE security advisories affecting Studio-42. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-81891 | elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE) — elFinder CWE-434 | 8.1 | High | 2026-08-31 |
| CVE-2026-81890 | elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections — elFinder CWE-352 | 5.4 | Medium | 2026-08-31 |
| CVE-2026-81889 | elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback — elFinder CWE-918 | 8.6 | High | 2026-08-31 |
| CVE-2026-44521 | elFinder: SQL Injection MySQL Volume Driver (elFinderVolumeMySQL) — elFinder CWE-89 | 8.8 | High | 2026-05-27 |
| CVE-2026-41247 | elFinder: Command injection in resize background color parameter when using ImageMagick CLI — elFinder CWE-78 | 9.8AI | Critical AI | 2026-04-23 |
| CVE-2021-32682 | Multiple vulnerabilities leading to RCE — elFinder CWE-918 | 9.8 | Critical | 2021-06-14 |
This page lists every published CVE security advisory associated with Studio-42. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.