Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-51027: FileThingie v2.5.7 Leaks Sensitive Information

CVE-2026-51027 CVE-2026-51027

Summary

A vulnerability in FileThingie v2.5.7 allows a hacker to access sensitive information without permission. This is a serious security risk because it could expose confidential data. To protect your data, update FileThingie to the latest version or consider replacing it with a more secure alternative.

Original title

An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component.

Original description

An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component.

nvd CVSS3.1 9.9

Vulnerability type

CWE-200 Information Exposure

https://github.com/SpeWnz/Vulnerability-Research/tree/main/CVE-2026-51027
https://github.com/leefish/filethingie

Published: 20 Jul 2026 · Updated: 20 Jul 2026 · First seen: 20 Jul 2026