Missing Authorization Vulnerability in FilePress by ZYX0814

CVE-2026-119657

What is CVE-2026-119657?

FilePress up to version 3.0.1 is susceptible to a missing authorization vulnerability within the PicHome library. This issue permits authenticated users to manipulate folders across different libraries without proper authorization, as the existing checks only verify membership to any library. Intruders who are aware of another library's application ID or folder ID can execute operations such as deleting or renaming folders, or retrieving folder data, thus compromising the integrity and confidentiality of data stored in foreign directories.

References