The vulnerability CVE-2026-27079 affects Mikado-Themes Amfissa versions up to 1.1 and is caused by improper control of filenames used in PHP include or require statements. This leads to a PHP Local File Inclusion vulnerability, which can allow an attacker to include local files on the server, potentially leading to code execution or information disclosure. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. No patch or vendor advisory details are available to confirm remediation status.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to include and execute arbitrary local files on the affected server, leading to full compromise of confidentiality, integrity, and availability of the system running Mikado-Themes Amfissa. This could result in unauthorized access to sensitive data, code execution, and service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable endpoints and applying any recommended temporary mitigations from the vendor. Monitor official Mikado-Themes communications for updates on patches or workarounds.