CVE-2025-26986

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Pearl - Corporate Business pearl allows PHP Local File Inclusion.This issue affects Pearl - Corporate Business: from n/a through < 3.4.8.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Theme/pearl/vulnerability/wordpress-pearl-theme-3-4-8-local-file-inclusion-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-98

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://vulncheck.com/

Full discourse1 post

♫Why♥Not♪@Python_s_1d
NØØT Security Alerts Classification: Critical CVE: CVE-2025-26986 Product: Affected product not specified by feed Summary: VulnCheck reports real-world exploitation activity affecting Affected product not specified by feed. Evidence: Active exploitation reported Impact: The vulnerability can materially affect exposed systems; verify vendor-specific impact and affected versions. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 26 Oct 2026 Source: https://vulncheck.com/ #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Affected_product_not_specified_by_feed #CVE_2025_26986 #ActiveExploitation #Exploit
0001056
231 followersView on X

Explore more

Back to dashboard