CVE-2026-6569: medium-severity vulnerability in kodcloud KodExplorer
kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Affected products
kodcloud · KodExplorerRelated CVEs — kodcloud KodExplorer
In the same product, most dangerous first.
CVE-2026-6568MEDIUMkodcloud KodExplorer Public Share share.class.php initShareOld path traversalEPSS 0.5%CVE-2025-34504MEDIUMKodExplorer 4.52 Open Redirect Vulnerability via User Login EndpointEPSS 0.3%CVE-2026-6570MEDIUMkodcloud KodExplorer systemMember.class.php initInstall authorizationEPSS 0.3%CVE-2026-6571MEDIUMkodcloud KodExplorer systemRole.class.php roleGroupAction authorizationEPSS 0.3%