CVE-2025-58926 describes a PHP Local File Inclusion vulnerability in the axiomthemes Cerebrum product due to improper control of filenames in include/require statements. This flaw allows attackers to include arbitrary local files on the server, which can lead to disclosure of sensitive information, code execution, or denial of service. The vulnerability affects Cerebrum versions up to 1.12. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability, with network attack vector and no privileges or user interaction required. No patch or official fix details are provided in the input data, and no known exploits have been reported.

Successful exploitation of this vulnerability can lead to local file inclusion, which may allow attackers to read sensitive files, execute arbitrary code, or cause denial of service. The CVSS score of 8.1 indicates high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users of axiomthemes Cerebrum up to version 1.12 should monitor vendor communications for updates. Until a fix is available, consider restricting access to vulnerable endpoints and applying web application firewall rules to detect and block attempts to exploit local file inclusion.