CVE-2026-41933 — Information Disclosure

title: CVE-2026-41933 - Vvveb Directory Listing Information Disclosure
id: scw-2026-05-14-ai-1
status: experimental
level: medium
description: |
  Detects attempts to access common Vvveb directories (admin, assets, plugins, themes, media) that are vulnerable to directory listing in versions prior to 1.0.8.3. Successful access (HTTP 200 status) indicates potential information disclosure of filenames, file sizes, and modification timestamps.
author: SCW Feed Engine (AI-generated)
date: 2026-05-14
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-41933/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/admin'
          - '/assets'
          - '/plugins'
          - '/themes'
          - '/media'
      sc-status:
          - 200
      condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse