Threat database

CVE-2026-62069 is a high severity vulnerability in CocoBasic Fabius versions 1.0 and earlier. It involves an unauthenticated local file inclusion due to improper control of filenames in include/require statements, classified under CWE-98. This flaw allows an attacker to potentially include arbitrary files, leading to full confidentiality, integrity, and availability compromise.

CVE-2026-62068 is a high-severity vulnerability in CocoBasic Teoro versions 1.1 and earlier. It is an unauthenticated Local File Inclusion (LFI) vulnerability caused by improper control of filenames used in include or require statements in PHP. This flaw allows an attacker to include local files on the server, potentially leading to remote code execution or data disclosure.

CVE-2026-62067 is a high-severity vulnerability in CocoBasic Kaven versions up to 1.2 that allows unauthenticated local file inclusion due to improper control of filenames in include/require statements. This flaw can lead to remote file inclusion attacks, potentially compromising confidentiality, integrity, and availability of the affected system.

CVE-2026-62066 is a high-severity vulnerability in CocoBasic Volos versions up to 1.2 that allows unauthenticated local file inclusion due to improper control of filenames in include/require statements. This flaw can lead to remote file inclusion attacks, potentially resulting in full system compromise.

CVE-2026-62065 is a high-severity vulnerability in CocoBasic Cardea versions up to 2.3. It is an unauthenticated Local File Inclusion (LFI) issue caused by improper control of filenames used in include/require statements in PHP. This flaw allows an attacker to include local files on the server, potentially leading to full system compromise.

Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Neresa neresa-wp allows PHP Local File Inclusion.This issue affects Neresa: from n/a through <= 1.3.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Anotte anotte-wp allows PHP Local File Inclusion.This issue affects Anotte: from n/a through <= 1.8.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Caliris caliris-wp allows PHP Local File Inclusion.This issue affects Caliris: from n/a through <= 1.5.