MomoTommy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM MomoTommy CVE published 2026-10-21

CVE-2026-114261

A vulnerability was found in the MomoTommy file-management-system, specifically in the FileController.php component of the Files API. The issue arises from missing authentication in the index/store/update/destroy functions. This vulnerability can be exploited remotely, and a public exploit has been made available. However, due to the lack of versioning in the product, information about affected and unaffe [truncated]