CVE-2025-26890

Name of the Vulnerable Software and Affected Versions PluginUs.Net HUSKY versions 1.3.6.4 and earlier

Description The issue is related to improper control of filename for include/require statement in PHP program, also known as PHP Remote File Inclusion, which allows PHP Local File Inclusion.

Recommendations For PluginUs.Net HUSKY versions 1.3.6.4 and earlier, update to a version that fixes this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.