Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-41933

Vvveb < 1.0.8.3 Directory Listing Information Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multiple paths lacking proper index directives in .htaccess files. Attackers can access directories such as admin asset paths, plugins, themes, and media folders to view filenames, file sizes, modification timestamps, and unrendered admin templates containing sensitive route maps.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

givanz Vvveb

Default version status: affected

  • 0 to < 1.0.8.3affected
  • 96ae04c5e4a295e281adc1d02d77444173653debunaffected
pkg:github/givanz/Vvveb

References