Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Incorrect Access Control in N-Media File Manager can let users access files they shouldn't

CVE-2026-25005
Summary

A security issue in the N-Media Frontend File Manager could allow users to access files they shouldn't have access to if access controls are not set up correctly. This affects a version of the N-Media Frontend File Manager, and users should check their configuration to ensure access controls are properly set up to prevent this issue. To fix this, update to a version of the software that has this issue addressed.

Original title
Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.Thi...
Original description
Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.5.
nvd CVSS3.1 5.3
Vulnerability type
CWE-639 Authorization Bypass Through User-Controlled Key
Published: 19 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026