Skip to content
OpenAdvisories

Vendor

admpub

1 known vulnerabilities.

Products

nging 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119653

    Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path

    Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autocomplete_path endpoint. Low-privileged users without file-manager permission can su…

    admpub nging