{"id":"CVE-2026-62069","published":"2026-10-10T20:16:41.490","lastModified":"2026-10-13T13:28:15.717","description":"Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-98"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/theme/fabius-wp/vulnerability/wordpress-fabius-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Fabius application suffers from an unauthenticated Local File Inclusion vulnerability that allows attackers to read arbitrary files on the server. This is particularly dangerous because no authentication is required to exploit it, making it a high-severity issue.","exploitability":"Exploitation requires sending a crafted request to the vulnerable endpoint with a file path parameter, but no authentication or user interaction is needed once the target is identified.","blast_radius":"If exploited, attackers could access sensitive server files including configuration data, database credentials, and potentially application source code, leading to further compromise of the affected system.","remediation":"Upgrade to Fabius version 1.1 or later to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["lfi","web","unauthenticated","file-read"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:08:32.241Z"}}