CVE-2026-37065

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.

• Published Aug 27, 2026
• CVSS 9.1 critical
• 0.5% chance of exploitation in the next 30 days (EPSS)

CVE-2026-37065 at the National Vulnerability Database