The vulnerability identified as CVE-2026-57802 affects the Select-Themes Struktur product through improper control of the filename parameter in PHP include/require statements. This results in a PHP Local File Inclusion vulnerability, which can be exploited to include unintended files on the server. The issue affects Struktur versions up to 2.5.1. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and the remediation level is unknown.

Successful exploitation of this vulnerability could allow an attacker with low privileges to include local files on the server, potentially leading to arbitrary code execution, data disclosure, or denial of service. The vulnerability impacts confidentiality, integrity, and availability of the affected system as indicated by the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and review configurations to limit file inclusion risks. Avoid exposing the application to untrusted inputs that control file inclusion parameters.