CVE Catalog

CVE-2026-28150

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Summary

Unauthenticated Local File Inclusion in Golo Framework versions prior to 1.7.5.

Risk Assessment

An attacker can read arbitrary files from the server, potentially leading to disclosure of sensitive data or further system compromise.

Recommendation

Update the Golo Framework to version 1.7.5 or later, which includes the security fix.

Other vulnerabilities in Golo Framework

Original NVD description (English source)

Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS