CVE-2026-30580

Published: Mar 20, 2026 Last Modified: Mar 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the 'create folder from url' functionality of the application to read arbitrary files on the target system.

https://github.com/leefish/filethingie
https://github.com/leefish/filethingie
https://github.com/SpeWnz/Vulnerability-Research/tree/main/…
https://github.com/SpeWnz/Vulnerability-Research/tree/main/CVE-2026-30580