SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-48194

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

27th percentile - higher than 27% of all known CVEs

Summary

Unauthenticated Local File Inclusion in DukaMarket versions up to 1.3.0.

Risk Assessment

An unauthenticated attacker can read arbitrary files from the server, including configuration files with credentials.

Recommendation

Update the DukaMarket plugin to the latest version that includes the security fix.

Other vulnerabilities in DukaMarket

Original NVD description (English source)

Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS