PT-2026-50269

CVE-2025-58952

·

Published

2025-10-07

·

Updated

2026-10-06

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Neuronet versions prior to 1.14.0
Description An unauthenticated Local File Inclusion (LFI) exists in the software. Local File Inclusion is a flaw that allows an attacker to read files on the local server that are not intended to be public.
Recommendations Update to version 1.14.0 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program (\'PHP Remote File Inclusion\')
Related identifiers
CVE-2025-58952
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com