CVEs published by Artica PFMS

CVEs published by Artica PFMS (CVE Numbering Authority). 8 tracked.

CVE-2026-75786 HIGH 7.2 Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blin
CVE-2026-64950 HIGH 8.4 Missing input validation and output encoding on the directory name parameter in File Manager's Create Director
CVE-2026-64949 HIGH 8.6 Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitra
CVE-2026-64948 HIGH 7.1 Missing authorization in module data retrieval allows unauthorized cross-group access to module history
CVE-2026-64947 HIGH 7.5 A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker
CVE-2026-34190 MEDIUM 5.9 Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential,
CVE-2026-34189 MEDIUM 5.9 Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged G
CVE-2026-64946 HIGH 7.4 A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-S