ab-download-manager vulnerabilities

CVEs whose affected-version data names the ab-download-manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121451High· 8.8

5d ago

AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRF

AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that allows remote attackers to write attacker-chosen files to arbitrary paths. A malicious web page can…

▾ Twilightamir1376 · ab-download-managerEPSS 0.29%via CVEORG