CVE Catalog
CVE-2026-40383
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.50%
40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability due to improper validation of user-supplied input leads to local file inclusion.
Risk Assessment
An attacker can read arbitrary files on the server, including configuration files and sensitive data, potentially leading to further privilege escalation.
Recommendation
Implement proper input validation and sanitization, and restrict access to sensitive files.
Original NVD description (English source)
An improper validation of user-supplied input leads to a local file inclusion vulnerability.