CVE-2026-6569

MEDIUM EPSS 33.1%

Published Apr 19, 20262mo ago · Modified Jun 17, 20261w ago

6.9 CVSS 4.0

Medium

Published Apr 19, 2026 2mo ago

Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Details

Base Score

6.9

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

33.1% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-287 Improper Authentication Authentication

References 4

vuldb.com https://vuldb.com/submit/789982
vuldb.com https://vuldb.com/vuln/358203
vuldb.com https://vuldb.com/vuln/358203/cti
vulnplus-note.wetolink.com https://vulnplus-note.wetolink.com/share/wgfZR6kXRApl

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.