CVE-2026-37266

High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the force_download.php component

Published 2026-05-28. Last modified 2026-06-17.