CVE Catalog
CVE-2026-62070
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.35%
27th percentile - higher than 27% of all known CVEs
Summary
Unauthenticated Local File Inclusion (LFI) in Flipmart versions up to 2.8. Allows an attacker to read files from the server without authentication.
Risk Assessment
An attacker can access sensitive files, potentially leading to data leakage or privilege escalation.
Recommendation
Update Flipmart to the latest version. If not possible, restrict access to the application and implement WAF rules to block LFI.
Other vulnerabilities in Flipmart
Original NVD description (English source)
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS