SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-42724

HighCVSS 8.1
Published: Translated: NVD NIST

Summary

Unauthenticated Local File Inclusion in CleanSkin versions up to 1.5.0.

Risk Assessment

An unauthenticated attacker can read arbitrary files from the server, including configuration files with credentials.

Recommendation

Update the CleanSkin plugin to the latest version that includes the security fix.

Other vulnerabilities in CleanSkin

Original NVD description (English source)

Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS