EUVD-2026-58073

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

CVE-2026-73574 affects Zimbra Collaboration (before 10.1.17). The issue is a local file inclusion (LFI) in the Forward servlet of the Classic Web Client due to improper validation of the fu request parameter, allowing an unauthenticated attacker to disclose protected files (e.g., WEB-INF/web.xml)...

CVE-2026-66657

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66656

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66653

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-65582

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66656

CVE-2026-66656 describes an unauthenticated Local File Inclusion in the WordPress Foton Core plugin, versioned = 1.1.2 is advised, but a concrete fix/version is not specified in the provided data.

CVE-2026-66657

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

EUVD-2026-57896

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66656 WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

EUVD-2026-57895

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66656

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66657

The CVE-2026-66657 entry describes an Unauthenticated Local File Inclusion in the WordPress Biagiotti Core plugin, versions

CVE-2026-66653

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

EUVD-2026-57892

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

CVE-2026-66653

CVE-2026-66653 corresponds to an unauthenticated Local File Inclusion in WordPress Barista theme (versions &lt;= 2.5.1). The vulnerability affects the Barista theme’s file handling, enabling LFI with a high severity (CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Root cause details are stated as...