CVE-2026-79426High· 7.2▾ MidnightPoC availableAn arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 39.6 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.1%
Last analysed / modified upstream
0.1% → 0.5%
An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-26157High· 7.0A flaw was found in BusyBox
CVE-2026-114253Medium· 6.3oretnom23 file-management-system-php index.php include file inclusion
CVE-2026-111234Medium· 5.9SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links
CVE-2026-57155Critical· 9.9OPNsense is a FreeBSD based firewall and routing platform
CVE-2026-54703Medium· 5.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code
CVE-2026-59976High· 8.1ConvertX is a self-hosted file conversion service