CVE-2026-37072

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.

• Published Aug 27, 2026
• CVSS 9.8 critical
• 0.5% chance of exploitation in the next 30 days (EPSS)

CVE-2026-37072 at the National Vulnerability Database