CVE-2025-28992 describes a vulnerability in the SNS Anton PHP theme where improper validation or control of filenames used in include or require statements allows local file inclusion. This flaw affects SNS Anton versions up to and including 4.1. The vulnerability is classified as high severity with a CVSS 3.1 score of 8.1, indicating network attack vector, high complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker to include local files on the server, potentially exposing sensitive information, executing arbitrary code, or causing denial of service. The CVSS score of 8.1 reflects a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable versions of SNS Anton or applying manual code review and hardening to control file inclusion paths. No official patch or workaround has been published.