Skip to content
OpenAdvisories

Vendor

aleksey-hoffman

1 known vulnerabilities.

Products

Sigma File Manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-111936

    Sigma File Manager through 2.2.0 SSRF via Extension Download Commands

    Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames res…

    aleksey-hoffman Sigma File Manager