CVE-2026-41933

Katalog CVE

CVSS 5.3 · Medium EPSS 0,42%

Kerentanan Exposure of Information Through Directory Listing. Skor CVSS 3.1 5.3 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multiple paths lacking proper index directives in .htaccess files. Attackers can access directories such as admin asset paths, plugins, themes, and media folders to view filenames, file sizes, modification timestamps, and unrendered admin templates containing sensitive route maps.

Rincian

Terbit di NVD

14 Mei 2026

Terakhir diubah

14 Juli 2026

Status NVD

Deferred

CVSS 3.1

5.3 (Medium), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-548: Exposure of Information Through Directory Listing

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,8% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/givanz/Vvveb/commit/96ae04c5e4a295e281adc1d02d77444173653deb
• https://github.com/givanz/Vvveb/releases/tag/1.0.8.3
• https://www.vulncheck.com/advisories/vvveb-directory-listing-information-disclosure