CVE Catalog
CVE-2026-42777
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.35%
27th percentile - higher than 27% of all known CVEs
Summary
Unauthenticated Local File Inclusion in Aalto versions up to 1.8.
Risk Assessment
An unauthenticated attacker can read arbitrary files from the server, including configuration files with credentials.
Recommendation
Update the Aalto plugin to the latest version that includes the security fix.
Other vulnerabilities in Aalto
Original NVD description (English source)
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS