CVE-2026-22464
Essential information
- Published
- 22/01/2026 17:16
- Modified
- 22/01/2026 17:16
- Author
- —
- Creator
- —
- CISA KEV
- No
- CWE
- —
- CVSS vector
- — — —
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows PHP Local File Inclusion.This issue affects My auctions allegro: from n/a through <= 3.6.33.
NVD status
- Status
- Received — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| wphocus / my auctions allegro | cpe:2.3:a:wphocus:my_auctions_allegro:<=3.6.33:*:*:*:*:*:*:* |