This vulnerability in TieLabs Jannah arises from improper validation or control of filenames used in PHP include/require statements, enabling PHP Local File Inclusion. The affected versions are from an unspecified start version through 7.6.4. The CVSS v3.1 base score is 8.1, indicating a high impact with network attack vector, high attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No patch or official fix details are currently available.

Successful exploitation of this vulnerability allows an attacker to include local files on the server, which can lead to disclosure of sensitive information, code execution, or denial of service. The CVSS score of 8.1 reflects a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying temporary mitigations such as restricting access to vulnerable endpoints, disabling vulnerable functionality if possible, or using web application firewalls to detect and block suspicious requests related to file inclusion attempts.