PT-2026-54975

CVE-2026-27412

·

Published

2026-06-29

·

Updated

2026-07-09

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Pearl - Corporate Business versions prior to 3.4.11
Description An unauthenticated Local File Inclusion (LFI) issue exists, which allows an attacker to read files from the local file system without requiring authentication.
Recommendations Update Pearl - Corporate Business to a version newer than 3.4.10.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program (\'PHP Remote File Inclusion\')
Related identifiers
CVE-2026-27412
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com