PT-2026-24001

CVE-2026-51925

·

Published

2026-03-08

·

Updated

2026-07-10

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions docuForm GmbH Client version 11.11c
Description A Local File Inclusion (LFI) flaw exists in the 'dfm-menu report.php' component. This issue allows a remote attacker to read arbitrary files on the server, such as system files, source code, or sensitive configuration files, which can lead to the execution of arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-639: Authorization Bypass Through User-Controlled Key
Related identifiers
CVE-2026-51925
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com