CVE-2026-51027

An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component

Critical · published July 20, 2026

CVSS v3.1
9.9
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component.

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.9th percentile
Published
2026-07-20T00:00Z
EPSS history
Timeline
  • 20 JUL 00:00Z
    An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component
    cvelistv5