{"id":"CVE-2026-62068","published":"2026-10-10T20:16:41.373","lastModified":"2026-10-13T13:28:15.717","description":"Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-98"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/theme/teoro-wp/vulnerability/wordpress-teoro-theme-1-1-local-file-inclusion-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An unauthenticated local file inclusion vulnerability in Teoro versions 1.1 and earlier allows attackers to read arbitrary files on the server filesystem without any authentication or user interaction. This flaw can lead to sensitive data exposure, including configuration files, database credentials, and application source code.","exploitability":"Exploitation requires sending a crafted request to the vulnerable endpoint with a malicious file path parameter, but no authentication is needed and no user interaction is required, making it highly automatable.","blast_radius":"If exploited, this vulnerability could expose sensitive server files including database credentials, application configuration, and source code, potentially leading to full system compromise through credential exposure or further exploitation.","remediation":"Upgrade to Teoro version 1.2 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["lfi","file-inclusion","web","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:08:38.084Z"}}