Tag
Yii 2 Local File Inclusion via View Parameter Name Collision (CVE-2026-39850)
2 rules 1 TTPA local file inclusion vulnerability (CVE-2026-39850) exists in Yii 2 versions prior to 2.0.55 due to the `View::renderPhpFile()` method's handling of the `_file_` parameter, allowing attackers to read arbitrary files and potentially achieve remote code execution if they can write PHP files.
SourceCodester Leave Application System 1.0 File Inclusion Vulnerability (CVE-2026-5210)
2 rules 1 TTP 1 CVE 1 IOCSourceCodester Leave Application System 1.0 is vulnerable to remote file inclusion (CVE-2026-5210) due to improper handling of the 'page' argument, potentially allowing attackers to execute arbitrary code.
Web Server Local File Inclusion Activity Detected
3 rules 4 TTPsDetection of potential Local File Inclusion (LFI) activity on web servers through HTTP GET requests attempting to access sensitive local files via directory traversal or known file paths, potentially leading to information disclosure and system compromise.
SmarterTools SmarterMail Local File Inclusion Vulnerability (CVE-2026-7807)
2 rules 1 TTP 1 CVESmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint (CVE-2026-7807) that allows authenticated users to read arbitrary .json files, potentially leading to credential compromise.