Skip to content
Sign in
8.1 High

CVE-2026-27383 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Metro metro allows PHP Local File Inclusion.This issue affects Metro: from n/a through <= 2.13.

Affected products and versions

Product Affected versions Fixed in
Metro 2.13 earliest → 2.13 No fix stated

Other CVEs of Metro

The 2 CVEs of Metro →
CVE-2026-27382 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme… 7.1 High
Track this CVE