CVE-2022-26646

CriticalCVSS 9.8

Published: 30/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.22%

65th percentile - higher than 65% of all known CVEs

Summary

Online Banking System Protect v1.0 contains a local file inclusion (LFI) vulnerability via the pages parameter. This allows an attacker to read sensitive files on the server.

Risk Assessment

The risk involves potential disclosure of confidential data such as configuration files or credentials, which could lead to further attack escalation.

Recommendation

It is recommended to immediately update the system to the latest version or apply security patches. Also restrict access to the pages parameter and validate input data.

Original NVD description (English source)

Online Banking System Protect v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the pages parameter.