{"id":"CVE-2026-62092","published":"2026-10-10T20:16:42.853","lastModified":"2026-10-13T13:28:15.717","description":"Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-98"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/theme/armania/vulnerability/wordpress-armania-theme-1-4-8-local-file-inclusion-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Armania versions 1.4.8 and earlier contain a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files on the server. This flaw enables attackers to access sensitive data and potentially escalate privileges by including local files.","exploitability":"Exploitation requires sending a crafted request to the vulnerable endpoint, but no authentication is needed, making it relatively easy to exploit with minimal preconditions.","blast_radius":"The vulnerability could lead to widespread data exposure across the affected system, potentially allowing attackers to access configuration files, user credentials, and other sensitive server-side resources.","remediation":"Upgrade to Armania version 1.5.0 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["lfi","web","unauthenticated","local-file-inclusion"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:08:09.528Z"}}