CVE-2023-26321

9.8 criticalEPSS 0.5%

Critical (9.8) in mi file manager. EPSS 0.5% chance of exploitation in the next 30 days.

A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-11-01)
CWE: CWE-22
Published: 2024-08-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mi:file_manager

References

https://trust.mi.com/misrc/bulletins/advisory?cveId=541

Check your stack JSON