CVE-2026-37065

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.

Published 2026-08-27. Last modified 2026-09-02.