{"id":"CVE-2026-62096","published":"2026-10-10T20:16:43.333","lastModified":"2026-10-13T13:28:15.717","description":"Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-98"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/theme/biolife/vulnerability/wordpress-biolife-theme-3-2-3-local-file-inclusion-vulnerability-2?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Biolife application suffers from an unauthenticated Local File Inclusion vulnerability that allows attackers to read arbitrary files from the server's filesystem without needing any credentials. This flaw can lead to sensitive data exposure and potentially full system compromise.","exploitability":"Exploitation requires sending a crafted request to the vulnerable endpoint, but no authentication is needed, making it relatively easy to exploit with minimal preconditions.","blast_radius":"If exploited, this vulnerability could expose sensitive application files, configuration data, and potentially allow attackers to read system files that could contain database credentials, API keys, or other critical information.","remediation":"Upgrade to Biolife version 3.2.4 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["lfi","local-file-inclusion","web","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:07:58.801Z"}}