CVE-2025-26977

Low CVSS: 3.8

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.4.2.1.

Vendor

Ninjateam

Product

Filebird

CWE

CWE-639

Yayın Tarihi

2025-02-25 15:15:30

Güncelleme

2026-04-23 15:26:10

Source Identifier

audit@patchstack.com

KEV Date Added

Kategoriler

CWE-639 Filebird LOW Ninjateam 2025

Referanslar

https://patchstack.com/database/Wordpress/Plugin/filebird/vulnerability/wordpress-filebird-plugin-6-4-2-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve