PT-2026-50271

CVE-2025-58954

Published

2025-10-10

Updated

2026-10-06

CVSS 3.1

8.1

High

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HomeRoofer versions prior to 2.11.1

Description An unauthenticated Local File Inclusion allows an attacker to read files from the local file system without requiring authentication.

Recommendations Update to a version newer than 2.11.0.

Exploitability

Fix

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾