Vulnerabilities

TI-2026-40118 CVE-2026-55579 · GHSA-p4h7-p9rj-2pq2

Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise

HIGH 82

Pheditor is a single-file editor and file manager written in PHP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00792 Published 2026-07-27 Fixed in 2.0.6 CWE-798

TI-2026-40117 CVE-2026-55578 · GHSA-wg4w-wr5q-6vjc

MEDIUM 41

Pheditor is a single-file editor and file manager written in PHP.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00667 Published 2026-07-27 Fixed in 2.0.6 CWE-78

TI-2026-39379 CVE-2026-54540 · GHSA-9643-6xjp-vx57

HIGH 73

Pheditor is a single-file editor and file manager written in PHP.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00734 Published 2026-07-27 Fixed in 2.0.5 CWE-78

TI-2026-35473 CVE-2026-48030 · GHSA-jvc5-6g7q-c843

HIGH 76

Pheditor is a single-file editor and file manager written in PHP.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.07548 Published 2026-07-27 Fixed in 2.0.4 CWE-78