The vulnerability CVE-2025-68543 affects the thembay Diza PHP program through improper control of filenames in include/require statements, leading to PHP Local File Inclusion. This can allow an attacker to include and execute arbitrary files on the server, impacting confidentiality, integrity, and availability. The affected versions are up to and including 1.3.15. The CVSS 3.1 base score is 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating a high-severity remote vulnerability requiring high attack complexity but no privileges or user interaction.

Successful exploitation could lead to unauthorized disclosure of sensitive information, modification of data, and disruption of service due to local file inclusion. The vulnerability affects confidentiality, integrity, and availability of the affected system. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to vulnerable endpoints and applying any recommended temporary mitigations from the vendor.