VulnCheck KEV: CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

GHSA-XHF4-832V-7XCR vulnerabilities

Vulnerabilities for packages: telegraf...

WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Steven Julian in WordPress Plugin Theme Test Drive versions = 2.9.1...

WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Vavo Core versions = 2.3.0...

CVE-2026-58420

Local File Inclusion via file:// URI in Migration Restore...

CVE-2026-58420

CVE-2026-58420 covers a Local File Inclusion (LFI) in Gitea’s Migration Restore. The vulnerability arises because the restore path feeds user-supplied asset.DownloadURL directly into a helper that supports both http/https and file:// schemes, with no validation to restrict to HTTP(S). An attacker...

CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore

Local File Inclusion via file:// URI in Migration Restore...

CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore

Local File Inclusion via file:// URI in Migration Restore...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

EUVD-2026-58073

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

Zimbra Collaboration versions before 10.1.17 are affected by a local file inclusion (LFI) vulnerability in the Forward servlet of the Classic Web Client. The root cause is improper validation of the fu request parameter, allowing an unauthenticated attacker to supply a crafted path and disclose p...

CVE-2026-66656

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66657

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66653

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66657

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66656

CVE-2026-66656 describes an unauthenticated Local File Inclusion in the WordPress Foton Core plugin, versioned = 1.1.2 is advised, but a concrete fix/version is not specified in the provided data.