The vulnerability CVE-2026-32392 in Creatives_Planet Greenly arises from improper validation or control of filenames used in PHP include or require statements, leading to PHP Local File Inclusion. This can allow an attacker with low privileges and no user interaction to execute arbitrary code or access sensitive files on the server. The CVSS score of 7.5 reflects a high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, and low privileges required. The affected versions include Greenly up to 8.1. No patch or official remediation information is currently available.

Successful exploitation of this vulnerability can lead to remote code execution or disclosure of sensitive local files, impacting confidentiality, integrity, and availability of the affected system. The attacker requires low privileges and no user interaction but must overcome high attack complexity. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious activity related to file inclusion attempts. Avoid exposing the application to untrusted inputs that could influence file inclusion paths.