CVE-2026-62094
HighCVSS 8.1Summary
Unauthenticated Local File Inclusion (LFI) in TechOne versions up to 3.0.3. Allows an attacker to read files from the server without authentication.
Risk Assessment
An attacker can access sensitive files such as configurations, passwords, or user data, potentially leading to full system compromise.
Recommendation
Update TechOne to the latest patched version. If not available, restrict access to the application and monitor logs for suspicious requests.
Other vulnerabilities in TechOne
See all- CVE-2026-62093High
Unauthenticated Cross Site Scripting (XSS) in TechOne versions up to 3.0.3. Allows an attacker to inject malicious scripts into a victim's browser.
- CVE-2026-39625Medium
The WordPress theme TechOne (techone) by kutethemes has a basic XSS vulnerability due to improper neutralization of script-related HTML tags. This allows code injection and affects versions up to and including 3.0.3.
Original NVD description (English source)
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS