PT-2026-4246 · Unknown · Uxper Golo

CVE-2026-23975

·

Published

2026-01-22

·

Updated

2026-01-22

CVSS v3.1

7.5

High

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions uxper Golo versions prior to 1.7.5
Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion.
Recommendations Update to version 1.7.5 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-23975

Affected Products

Uxper Golo